Azure Pipelines

Azure Pipelines runs automated jobs for a project. A pipeline can build code, test it, publish an artefact, scan infrastructure code, or deploy a change into Azure.

For infrastructure repos, a common pattern is:

• validate the configuration
• run a security or policy check
• create a plan
• pause for approval if the plan destroys resources
• apply the plan

That is just CI/CD with more guard rails. The hard part is not writing the YAML. The hard part is keeping secrets out of logs, making failures obvious, and stopping the pipeline from becoming the only place anyone understands how deployments work.