How feasible is this idea for an entry level project in Azure/Terraform for my portfolio?
I'm trying to transition into Cloud Operations from IT Support, and I've been learning Azure and Terraform for a few months now. I keep hearing how it's best to include your own projects in your CV to increase your chances of finding a job, but tbh I've never been good at coming up on my own with feasible ideas for these things that wouldn't amount to be simply rehashing some guided projects/labs you can find online on Udemy and similar sites.
I've tried extending some concepts I've learned about in my Azure training, and so this is what I've come up with:
- Deploy a storage account with a blob container, and then show 2 ways you can restrict access to it.
- The first way is to disable public network access, and create a private endpoint connecting the storage account to a virtual network. I would then deploy a virtual machine on that network (with a key vault to store the login password to the VM in), remote to it through Bastion, and access the blob container from there.
- The second way is to use RBAC. I would disable key access and default to Entra ID authentication, then create a group with a "Storage Account Contributor" role assigned to it in that storage account's scope, and assign users to that group.
- Finally, I would convert this into IaC in Terraform to automate deployment, with an added option of using another storage account for storing remote state files through Azure backend. The Terraform code would be stored on GitHub.
I've already written and tested most of the code, but I can't shake the feeling that this whole idea is somewhat... crude. Would it really make sense to put something like this in my portfolio?