Bicep Modules: Enterprise Infrastructure Scale

To manage 100+ Azure subscriptions, you cannot copy-paste Bicep files. You need Modules.

Private Registry

You can publish modules to an Azure Container Registry (ACR).

bicep publish storage.bicep --target br:myregistry.azurecr.io/bicep/storage:v1

Then consume it:

module stg 'br:myregistry.azurecr.io/bicep/storage:v1' = {
  name: 'storage'
  params: { sku: 'Standard_GRS' }
}

This enforces compliance. If the module enforces HTTPS only, every consumer adheres to it.