initial-setup

Type: decision

Decision

The platform has a one-time manual setup process to configure the Azure management group hierarchy and billing, Entra ID authentication, and the GitHub organization.

Why

BigBang can't bootstrap its own prerequisites — it needs identity to authenticate, a hierarchy to deploy into, and a repo to store configuration.

Links

• platform-identity-azure — App registration created, OIDC federation configured, and role assigned at the management group.
• platform-identity-github — GitHub App created and installed.
• landing-zone-lifecycle — The subscription-bank management group is created here.
• platform-test-environment — The Gazelle-test and Gazelle-prod management groups are created here.

← Back to all decisions