deployment-declarative-lifecycle

Type: regulative

Decision

A deployment stack must be configured with deleteAll, so what its code stops declaring is removed from Azure.

Why

Without this, resources removed from the stack's code persist in Azure and the code stops being the source of truth.

Violations

• Deployment Stack configured with detachAll, leaving removed resources with no cleanup path.
• Resource created directly in Azure and left outside the stack.

Anchor

no-human-touch

Implements

• codebase

Files

• .github/workflows/template-landing-zones.yml
• .github/workflows/template-access-control.yml
• .github/workflows/template-Azure-Policy.yml
• .github/workflows/template-Management-Groups.yml

← Back to knowledge graph