I'm coming from a Microsoft Azure perspective here, and looking to move from manually created/partially scripted infra-setup with VM's to full IaC using Azure DevOps as a single repo for code, infra and pipelines.
In my current infrastructure we have a lot of Windows Server VM's that after provisioning still require additional OS configuration and app installations.
Am I correct in thinking that IaC only really 'works' as intended if you only provision Azure managed services (like storage, containers, app services etc), and not use IAAS like VM's? Ofcourse I can still 'code' the Virtual Machines themselves, but that still leaves the configuration of the VM uncoded? So can IaC be fully used for 'legacy' IAAS scenarios?