Question

Your platform team wants developers to self-provision ephemeral test environments in Azure on demand, but the environments must only use pre-approved infrastructure templates, be deployed into specific subscriptions per project, and be automatically tracked for cleanup. Developers should request environments through a catalog without having direct rights to write ARM/Bicep at will. Which Azure service and configuration best meets these requirements?

Accepted Answer

Azure Deployment Environments with a dev center, environment types mapped to target subscriptions, and a catalog of environment definitions sourced from a Git repository

Answer

Grant each developer Contributor on a shared subscription and provide a Bicep module registry they can deploy from manually

Answer

Create Azure DevOps release pipelines with manual approval gates that run az deployment commands using a service connection

Answer

Use Azure Blueprints assignments applied at the management group level for every developer request