RTFE v1.0 · 18 errors · 13 categories · 0 excuses

THE ERROR TOLD YOU.
YOU JUST DIDN'T READ IT.

Azure / Entra / Terraform errors, translated into human.

Paste the error. Find the part that matters. Fix the actual problem.

pipeline — deploy.yml

$ az deployment group create -g rg-prod -f main.bicep
> Deploying...
> Operation failed.
 
AuthorizationFailed
The client 'a1b2c3d4-…' does not have authorization
to perform action
'Microsoft.Storage/storageAccounts/write'← WHAT

● Error decoder

Local only

Runs entirely in your browser

No Azure credentials. No backend. No external AI. Still: redact secrets, tokens, passwords and connection strings before pasting.

The signal

WHO → WHAT → WHERE

The three things you should find before declaring Azure broken.

WHO

Who is actually doing this?

· User
· Service principal
· Managed identity
· Object ID / Client ID

WHAT

What operation was attempted?

· Microsoft.Storage/storageAccounts/write
· …/subnets/join/action
· …/vaults/secrets/read

WHERE

Where was it attempted?

· Subscription
· Resource group
· Resource / scope
· Tenant, region, VNet

Method

HOW TO RTFE

01
Ignore the envelope
DeploymentFailed and InvalidTemplateDeployment are usually wrappers. Open the inner details.
02
Find the innermost code
That's the part you search for. AuthorizationFailed, not “Azure deployment broken”.
03
Read the nouns
WHO — principal / object ID. WHAT — action. WHERE — scope.
04
Search the code, not your theory
Search AuthorizationFailed instead of ~~why is azure broken~~.