Enterprise tooling (aka a usable API) and it stays out if my way.

Along a similar vain to making a git friend, buy your sysadmins/ops people a box of doughnuts once in a while. They (generally) all code and will have some knowledge of what you are working on.

So counter point. Active directory is a god send for managing endpoints, user accounts, endpoints, etc.

No you don’t let windows act as a dns server outside the ad subdomain, no you don’t use windows to admin your root private ca, and for all you hold dear do not enable that God forsaken web server. But for what it does well, it’s the best solution out there.

Just to pile on. I’ve seen devs throw out the entire git history when moving between repos for ongoing projects.

Let’s take this one step further. I should be able to get the core ideas in your code by comments and cs 101 level coding (eg basic data structures, loops, and if/then).

We’ve got it rigged up for aws sso. Each department can make any number of permissions sets (and link to any number of groups). The config for that is all stored in git (with code owners configured so you can only mess up your own stuff).

So I’m using it with Python. For me it’s able to do some stuff that terrafom never would be able to (Ive got a spot where resources are generated for each file/object on disk).

I for one am recommending pulumi for any of my teams new infrastructure needs.