Assign proper RBAC roles (e.g., Contributor or Owner). Usage in pipeline: - task: AzureResourceManagerTemplateDeployment@3 inputs: azureResourceManagerConnection: 'MyServiceConnection' resourceGroupName: 'MyRG' location: 'East US' csmFile: 'infra/main.json' Example scenario: Your IaC pipeline uses the “ProdServiceConnection” to deploy Bicep templates to the production resource group, without developers ever seeing credentials. 4⃣ How can you automate environment creation and teardown?

Short answer: You can automate creating and destroying environments (like dev, test, or staging) using pipeline logic and IaC tools.

Explain a bit more

✅ Example (Bicep – Create Environment): task: AzureCLI@2 inputs: azureSubscription: 'MyServiceConnection' scriptType: 'bash' inlineScript: | az group create --name MyRG --location eastus az deployment group create --resource-group MyRG -template-file infra/main.bicep ✅ Example (Terraform – Teardown Environment): task: TerraformCLI@1 Follow: inputs: command: 'destroy' workingDirectory: 'infra' commandOptions: '-auto-approve' environmentServiceName: 'MyServiceConnection' Example scenario: Each pull request automatically spins up a temporary Azure environment (App Service + Database) for testing.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.