I’d skip Active Directory but the rest seems reasonable.

Doing it all through infra as code and using ci/cd tend to be the most “devopsy” things.