24 changed files
terraform_sqlmi | ||
env | ||
atest | ||
variables.tfvars + | ||
local | ||
backend-config.tfvars + | ||
variables.tfvars + | ||
prod | ||
variables.tfvars + | ||
stest | ||
variables.tfvars + | ||
modules | ||
keyvault | ||
keyvault.tf + | ||
variables.tf + | ||
mi | ||
mi.tf + | ||
variables.tf + | ||
resourcegroup | ||
output.tf + | ||
resourcegroup.tf + | ||
variables.tf + | ||
storage | ||
storage-container | ||
storage-contaner.tf + | ||
variables.tf + | ||
output.tf + | ||
storage.tf + | ||
variables.tf + | ||
backend.tf + | ||
commands.ps1 + | ||
config.azurerm.tfbackend + | ||
locals.tf + | ||
main.tf + | ||
providers.tf + | ||
variables.tf + | ||
variables.tfvars
/terraform_sqlmi/env/atest/variables.tfvars+103/terraform_sqlmi/env/atest/variables.tfvars
Add comment 1 Plus ##at01
Add comment 2 Plus staccount = {
Add comment 3 Plus "at01" = {
Add comment 4 Plus resource_group_name = "rg-sqlmi-test-management-terraform"
Add comment 5 Plus storage_account_name = "1zupa2e23ddddxx8at01"
Add comment 6 Plus access_tier = "Cool"
Add comment 7 Plus }
Add comment 8 Plus }
Add comment 9 Plus
Add comment 10 Plus
Add comment 11 Plus kvault = {
Add comment 12 Plus resource_group_name = "rg-sqlmi-stest-management"
Add comment 13 Plus kvault_name = "kv-sqlmi-stest"
Add comment 14 Plus }
Add comment 15 Plus
Add comment 16 Plus vnet = {
Add comment 17 Plus resource_group_name = "SQL-Hotel-Test-Network"
Add comment 18 Plus vnet_name = "SQL-Hotel-Test-Network"
Add comment 19 Plus route_name = "SQL-Hotel-Test-Network-UDR"
Add comment 20 Plus }
Add comment 21 Plus
Add comment 22 Plus # Common
Add comment 23 Plus
Add comment 24 Plus location = "westeurope"
Add comment 25 Plus subscription = "c0723d0a-90a1-42b0-ba86-efd217b7483e"
Add comment 26 Plus azure_tenant_id = "de7e7a67-ae61-49d2-97a7-526c910ad675"
Add comment 27 Plus
Add comment 28 Plus project_name = "sqlmi"
Add comment 29 Plus environment = "at"
Add comment 30 Plus instance = "db"
Add comment 31 Plus number = "02"
Add comment 32 Plus
Add comment 33 Plus managed_instance = {
Add comment 34 Plus resource_group_name = "rg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 35 Plus name = "${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 36 Plus nsg_name = "nsg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 37 Plus subnet_name = "snet-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 38 Plus storage_account_name = "sto${var.project_name}${var.environment}${var.instance}${var.number}"
Add comment 39 Plus }
Add comment 40 Plus
Add comment 41 Plus license_type = "BasePrice"
Add comment 42 Plus sku_name = "GP_Gen5"
Add comment 43 Plus storage_size_in_gb = 32
Add comment 44 Plus subnet_id = " "
Add comment 45 Plus vcores = 4
Add comment 46 Plus
Add comment 47 Plus administrator_login = "mradministrator"
Add comment 48 Plus administrator_login_password = "thisIsDog11"
Add comment 49 Plus
Add comment 50 Plus
Add comment 51 Plus
Add comment 52 Plus //common_tags = {
Add comment 53 Plus // Environment = "stest"
Add comment 54 Plus // "Responsible" : "drojan@ifitservices.emea.microsoftonline.com"
Add comment 55 Plus // "ITSystemCode" : "SDSSQ00"
Add comment 56 Plus //}
Add comment 57 Plus
Add comment 58 Plus admin_group = "bb34d711-75a0-42cc-9b7e-5bd293a248bb" # GA SDSSQ00 SQL Directory Reader
Add comment 59 Plus reader_apps = [""]
Add comment 60 Plus
Add comment 61 Plus whitelisted_if_ips = [
Add comment 62 Plus {
Add comment 63 Plus name = "DK_Stamholmen"
Add comment 64 Plus ip_range = "213.83.166.0/28"
Add comment 65 Plus type = "cidr"
Add comment 66 Plus },
Add comment 67 Plus {
Add comment 68 Plus name = "SE_Bergshamra"
Add comment 69 Plus ip_range = "62.119.15.80/28"
Add comment 70 Plus type = "cidr"
Add comment 71 Plus },
Add comment 72 Plus {
Add comment 73 Plus name = "NO_Vaekero"
Add comment 74 Plus ip_range = "62.92.89.224/28"
Add comment 75 Plus type = "cidr"
Add comment 76 Plus },
Add comment 77 Plus {
Add comment 78 Plus name = "FI_Turku"
Add comment 79 Plus ip_range = "193.65.7.80/28"
Add comment 80 Plus type = "cidr"
Add comment 81 Plus },
Add comment 82 Plus {
Add comment 83 Plus name = "Baltics"
Add comment 84 Plus ip_range = "195.190.141.0/24"
Add comment 85 Plus type = "cidr"
Add comment 86 Plus },
Add comment 87 Plus {
Add comment 88 Plus name = "Data_Center"
Add comment 89 Plus ip_range = "193.34.40.0/24"
Add comment 90 Plus type = "cidr"
Add comment 91 Plus },
Add comment 92 Plus {
Add comment 93 Plus name = "If_Firewall_One"
Add comment 94 Plus ip_range = "51.105.188.144"
Add comment 95 Plus type = "ip"
Add comment 96 Plus },
Add comment 97 Plus {
Add comment 98 Plus name = "If_Firewall_Two"
Add comment 99 Plus ip_range = "51.105.186.105"
Add comment 100 Plus type = "ip"
Add comment 101 Plus }
Add comment 102 Plus ]
Add comment 103 Plus
backend-config.tfvars
/terraform_sqlmi/env/local/backend-config.tfvars+3/terraform_sqlmi/env/local/backend-config.tfvars
Add comment 1 Plus storage_account_name = "stosqlmitestmanagement"
Add comment 2 Plus container_name = "common-sql"
Add comment 3 Plus key = "local-resource-group"
variables.tfvars
/terraform_sqlmi/env/local/variables.tfvars+112/terraform_sqlmi/env/local/variables.tfvars
Add comment 1 Plus staccount = {
Add comment 2 Plus "st01" = {
Add comment 3 Plus resource_group_name = "rg-sqlmi-stest-management-terraform"
Add comment 4 Plus storage_account_name = "1zupa2e23ddddxx8st01"
Add comment 5 Plus access_tier = "Hot"
Add comment 6 Plus },
Add comment 7 Plus "st02" = {
Add comment 8 Plus resource_group_name = "rg-sqlmi-stest-management-terraform"
Add comment 9 Plus storage_account_name = "1zupa2e23ddddxx8st02"
Add comment 10 Plus access_tier = "Hot"
Add comment 11 Plus }
Add comment 12 Plus }
Add comment 13 Plus
Add comment 14 Plus
Add comment 15 Plus kvresource_group_name = "rg-sqlmi-local-management"
Add comment 16 Plus
Add comment 17 Plus
Add comment 18 Plus
Add comment 19 Plus keyvault_name = "kv-sqlmi-local"
Add comment 20 Plus
Add comment 21 Plus
Add comment 22 Plus
Add comment 23 Plus vnet_resource_group_name = "SQL-Hotel-Test-Network"
Add comment 24 Plus vnet_name = "SQL-Hotel-Test-Network"
Add comment 25 Plus route_name = "SQL-Hotel-Test-Network-UDR"
Add comment 26 Plus address_space = "10.162.30.128/26"
Add comment 27 Plus address_prefixes = "10.162.30.128/27"
Add comment 28 Plus
Add comment 29 Plus
Add comment 30 Plus
Add comment 31 Plus # Common
Add comment 32 Plus
Add comment 33 Plus location = "westeurope"
Add comment 34 Plus subscription = "c0723d0a-90a1-42b0-ba86-efd217b7483e"
Add comment 35 Plus azure_tenant_id = "de7e7a67-ae61-49d2-97a7-526c910ad675"
Add comment 36 Plus
Add comment 37 Plus project_name = "sqlmi"
Add comment 38 Plus environment = "at"
Add comment 39 Plus instance = "db"
Add comment 40 Plus number = "02"
Add comment 41 Plus
Add comment 42 Plus managed_instance = {
Add comment 43 Plus resource_group_name = "rg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 44 Plus name = "${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 45 Plus nsg_name = "nsg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 46 Plus subnet_name = "snet-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 47 Plus storage_account_name = "sto${var.project_name}${var.environment}${var.instance}${var.number}"
Add comment 48 Plus }
Add comment 49 Plus
Add comment 50 Plus license_type = "BasePrice"
Add comment 51 Plus sku_name = "GP_Gen5"
Add comment 52 Plus storage_size_in_gb = 32
Add comment 53 Plus #subnet_id = ""
Add comment 54 Plus vcores = 4
Add comment 55 Plus
Add comment 56 Plus administrator_login = "mi-poc-admin"
Add comment 57 Plus administrator_login_password = "thisIsDog11"
Add comment 58 Plus
Add comment 59 Plus
Add comment 60 Plus
Add comment 61 Plus //common_tags = {
Add comment 62 Plus // Environment = "stest"
Add comment 63 Plus // "Responsible" : "drojan@ifitservices.emea.microsoftonline.com"
Add comment 64 Plus // "ITSystemCode" : "SDSSQ00"
Add comment 65 Plus //}
Add comment 66 Plus
Add comment 67 Plus admin_group = "bb34d711-75a0-42cc-9b7e-5bd293a248bb" # GA SDSSQ00 SQL Directory Reader
Add comment 68 Plus readers = ["sqlmi-st-db-02", "sqlmi-st-db-01"]
Add comment 69 Plus
Add comment 70 Plus whitelisted_if_ips = [
Add comment 71 Plus {
Add comment 72 Plus name = "DK_Stamholmen"
Add comment 73 Plus ip_range = "213.83.166.0/28"
Add comment 74 Plus type = "cidr"
Add comment 75 Plus },
Add comment 76 Plus {
Add comment 77 Plus name = "SE_Bergshamra"
Add comment 78 Plus ip_range = "62.119.15.80/28"
Add comment 79 Plus type = "cidr"
Add comment 80 Plus },
Add comment 81 Plus {
Add comment 82 Plus name = "NO_Vaekero"
Add comment 83 Plus ip_range = "62.92.89.224/28"
Add comment 84 Plus type = "cidr"
Add comment 85 Plus },
Add comment 86 Plus {
Add comment 87 Plus name = "FI_Turku"
Add comment 88 Plus ip_range = "193.65.7.80/28"
Add comment 89 Plus type = "cidr"
Add comment 90 Plus },
Add comment 91 Plus {
Add comment 92 Plus name = "Baltics"
Add comment 93 Plus ip_range = "195.190.141.0/24"
Add comment 94 Plus type = "cidr"
Add comment 95 Plus },
Add comment 96 Plus {
Add comment 97 Plus name = "Data_Center"
Add comment 98 Plus ip_range = "193.34.40.0/24"
Add comment 99 Plus type = "cidr"
Add comment 100 Plus },
Add comment 101 Plus {
Add comment 102 Plus name = "If_Firewall_One"
Add comment 103 Plus ip_range = "51.105.188.144"
Add comment 104 Plus type = "ip"
Add comment 105 Plus },
Add comment 106 Plus {
Add comment 107 Plus name = "If_Firewall_Two"
Add comment 108 Plus ip_range = "51.105.186.105"
Add comment 109 Plus type = "ip"
Add comment 110 Plus }
Add comment 111 Plus ]
Add comment 112 Plus
variables.tfvars
/terraform_sqlmi/env/prod/variables.tfvars+101/terraform_sqlmi/env/prod/variables.tfvars
Add comment 1 Plus ##at01
Add comment 2 Plus staccount = {
Add comment 3 Plus "pr01" = {
Add comment 4 Plus resource_group_name = "rg-sqlmi-prod-management-terraform"
Add comment 5 Plus storage_account_name = "1zupa2e23ddddxx8at01"
Add comment 6 Plus access_tier = "Hot"
Add comment 7 Plus }
Add comment 8 Plus }
Add comment 9 Plus
Add comment 10 Plus kvault = {
Add comment 11 Plus resource_group_name = "rg-sqlmi-prod-management"
Add comment 12 Plus kvault_name = "kv-sqlmi-prod"
Add comment 13 Plus }
Add comment 14 Plus
Add comment 15 Plus vnet = {
Add comment 16 Plus resource_group_name = "SQL-Hotel-Prod-Network"
Add comment 17 Plus vnet_name = "SQL-Hotel-Prod-Network"
Add comment 18 Plus route_name = "SQL-Hotel-Prod-Network-UDR"
Add comment 19 Plus }
Add comment 20 Plus
Add comment 21 Plus # Common
Add comment 22 Plus
Add comment 23 Plus location = "westeurope"
Add comment 24 Plus subscription = "ca352517-27bb-41fc-98e0-22e58196594e"
Add comment 25 Plus azure_tenant_id = "de7e7a67-ae61-49d2-97a7-526c910ad675"
Add comment 26 Plus
Add comment 27 Plus project_name = "sqlmi"
Add comment 28 Plus environment = "pr"
Add comment 29 Plus instance = "db"
Add comment 30 Plus number = "02"
Add comment 31 Plus
Add comment 32 Plus managed_instance = {
Add comment 33 Plus resource_group_name = "rg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 34 Plus name = "${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 35 Plus nsg_name = "nsg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 36 Plus subnet_name = "snet-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 37 Plus storage_account_name = "sto${var.project_name}${var.environment}${var.instance}${var.number}"
Add comment 38 Plus }
Add comment 39 Plus
Add comment 40 Plus license_type = "BasePrice"
Add comment 41 Plus sku_name = "GP_Gen5"
Add comment 42 Plus storage_size_in_gb = 32
Add comment 43 Plus subnet_id = " "
Add comment 44 Plus vcores = 4
Add comment 45 Plus
Add comment 46 Plus administrator_login = "mradministrator"
Add comment 47 Plus administrator_login_password = "thisIsDog11"
Add comment 48 Plus
Add comment 49 Plus
Add comment 50 Plus
Add comment 51 Plus //common_tags = {
Add comment 52 Plus // Environment = "stest"
Add comment 53 Plus // "Responsible" : "drojan@ifitservices.emea.microsoftonline.com"
Add comment 54 Plus // "ITSystemCode" : "SDSSQ00"
Add comment 55 Plus //}
Add comment 56 Plus
Add comment 57 Plus admin_group = "bb34d711-75a0-42cc-9b7e-5bd293a248bb" # GA SDSSQ00 SQL Directory Reader
Add comment 58 Plus reader_apps = [""]
Add comment 59 Plus
Add comment 60 Plus whitelisted_if_ips = [
Add comment 61 Plus {
Add comment 62 Plus name = "DK_Stamholmen"
Add comment 63 Plus ip_range = "213.83.166.0/28"
Add comment 64 Plus type = "cidr"
Add comment 65 Plus },
Add comment 66 Plus {
Add comment 67 Plus name = "SE_Bergshamra"
Add comment 68 Plus ip_range = "62.119.15.80/28"
Add comment 69 Plus type = "cidr"
Add comment 70 Plus },
Add comment 71 Plus {
Add comment 72 Plus name = "NO_Vaekero"
Add comment 73 Plus ip_range = "62.92.89.224/28"
Add comment 74 Plus type = "cidr"
Add comment 75 Plus },
Add comment 76 Plus {
Add comment 77 Plus name = "FI_Turku"
Add comment 78 Plus ip_range = "193.65.7.80/28"
Add comment 79 Plus type = "cidr"
Add comment 80 Plus },
Add comment 81 Plus {
Add comment 82 Plus name = "Baltics"
Add comment 83 Plus ip_range = "195.190.141.0/24"
Add comment 84 Plus type = "cidr"
Add comment 85 Plus },
Add comment 86 Plus {
Add comment 87 Plus name = "Data_Center"
Add comment 88 Plus ip_range = "193.34.40.0/24"
Add comment 89 Plus type = "cidr"
Add comment 90 Plus },
Add comment 91 Plus {
Add comment 92 Plus name = "If_Firewall_One"
Add comment 93 Plus ip_range = "51.105.188.144"
Add comment 94 Plus type = "ip"
Add comment 95 Plus },
Add comment 96 Plus {
Add comment 97 Plus name = "If_Firewall_Two"
Add comment 98 Plus ip_range = "51.105.186.105"
Add comment 99 Plus type = "ip"
Add comment 100 Plus }
Add comment 101 Plus ]
variables.tfvars
/terraform_sqlmi/env/stest/variables.tfvars+105/terraform_sqlmi/env/stest/variables.tfvars
Add comment 1 Plus staccount = {
Add comment 2 Plus "st01" = {
Add comment 3 Plus resource_group_name = "rg-sqlmi-stest-management-terraform"
Add comment 4 Plus storage_account_name = "1zupa2e23ddddxx8st01"
Add comment 5 Plus access_tier = "Hot"
Add comment 6 Plus },
Add comment 7 Plus "st02" = {
Add comment 8 Plus resource_group_name = "rg-sqlmi-stest-management-terraform"
Add comment 9 Plus storage_account_name = "1zupa2e23ddddxx8st02"
Add comment 10 Plus access_tier = "Hot"
Add comment 11 Plus }
Add comment 12 Plus }
Add comment 13 Plus
Add comment 14 Plus kvault = {
Add comment 15 Plus resource_group_name = "rg-sqlmi-stest-management"
Add comment 16 Plus kvault_name = "kv-sqlmi-stest"
Add comment 17 Plus }
Add comment 18 Plus
Add comment 19 Plus vnet = {
Add comment 20 Plus resource_group_name = "SQL-Hotel-Test-Network"
Add comment 21 Plus vnet_name = "SQL-Hotel-Test-Network"
Add comment 22 Plus route_name = "SQL-Hotel-Test-Network-UDR"
Add comment 23 Plus }
Add comment 24 Plus
Add comment 25 Plus # Common
Add comment 26 Plus
Add comment 27 Plus location = "westeurope"
Add comment 28 Plus subscription = "c0723d0a-90a1-42b0-ba86-efd217b7483e"
Add comment 29 Plus azure_tenant_id = "de7e7a67-ae61-49d2-97a7-526c910ad675"
Add comment 30 Plus
Add comment 31 Plus project_name = "sqlmi"
Add comment 32 Plus environment = "st"
Add comment 33 Plus instance = "db"
Add comment 34 Plus number = "02"
Add comment 35 Plus
Add comment 36 Plus managed_instance = {
Add comment 37 Plus resource_group_name = "rg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 38 Plus name = "${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 39 Plus nsg_name = "nsg-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 40 Plus subnet_name = "snet-${var.project_name}-${var.environment}-${var.instance}-${var.number}"
Add comment 41 Plus storage_account_name = "sto${var.project_name}${var.environment}${var.instance}${var.number}"
Add comment 42 Plus }
Add comment 43 Plus
Add comment 44 Plus license_type = "BasePrice"
Add comment 45 Plus sku_name = "GP_Gen5"
Add comment 46 Plus storage_size_in_gb = 32
Add comment 47 Plus subnet_id = " "
Add comment 48 Plus vcores = 4
Add comment 49 Plus
Add comment 50 Plus administrator_login = "mradministrator"
Add comment 51 Plus administrator_login_password = "thisIsDog11"
Add comment 52 Plus
Add comment 53 Plus
Add comment 54 Plus
Add comment 55 Plus //common_tags = {
Add comment 56 Plus // Environment = "stest"
Add comment 57 Plus // "Responsible" : "drojan@ifitservices.emea.microsoftonline.com"
Add comment 58 Plus // "ITSystemCode" : "SDSSQ00"
Add comment 59 Plus //}
Add comment 60 Plus
Add comment 61 Plus admin_group = "bb34d711-75a0-42cc-9b7e-5bd293a248bb" # GA SDSSQ00 SQL Directory Reader
Add comment 62 Plus reader_apps = [""]
Add comment 63 Plus
Add comment 64 Plus whitelisted_if_ips = [
Add comment 65 Plus {
Add comment 66 Plus name = "DK_Stamholmen"
Add comment 67 Plus ip_range = "213.83.166.0/28"
Add comment 68 Plus type = "cidr"
Add comment 69 Plus },
Add comment 70 Plus {
Add comment 71 Plus name = "SE_Bergshamra"
Add comment 72 Plus ip_range = "62.119.15.80/28"
Add comment 73 Plus type = "cidr"
Add comment 74 Plus },
Add comment 75 Plus {
Add comment 76 Plus name = "NO_Vaekero"
Add comment 77 Plus ip_range = "62.92.89.224/28"
Add comment 78 Plus type = "cidr"
Add comment 79 Plus },
Add comment 80 Plus {
Add comment 81 Plus name = "FI_Turku"
Add comment 82 Plus ip_range = "193.65.7.80/28"
Add comment 83 Plus type = "cidr"
Add comment 84 Plus },
Add comment 85 Plus {
Add comment 86 Plus name = "Baltics"
Add comment 87 Plus ip_range = "195.190.141.0/24"
Add comment 88 Plus type = "cidr"
Add comment 89 Plus },
Add comment 90 Plus {
Add comment 91 Plus name = "Data_Center"
Add comment 92 Plus ip_range = "193.34.40.0/24"
Add comment 93 Plus type = "cidr"
Add comment 94 Plus },
Add comment 95 Plus {
Add comment 96 Plus name = "If_Firewall_One"
Add comment 97 Plus ip_range = "51.105.188.144"
Add comment 98 Plus type = "ip"
Add comment 99 Plus },
Add comment 100 Plus {
Add comment 101 Plus name = "If_Firewall_Two"
Add comment 102 Plus ip_range = "51.105.186.105"
Add comment 103 Plus type = "ip"
Add comment 104 Plus }
Add comment 105 Plus ]
keyvault.tf
/terraform_sqlmi/modules/keyvault/keyvault.tf+64/terraform_sqlmi/modules/keyvault/keyvault.tf
Add comment 1 Plus resource "azurerm_key_vault" "key-vault" {
Add comment 2 Plus name = var.keyvault_name #"kv-${var.project_name}-${var.environment}-${var.instance}"
Add comment 3 Plus resource_group_name = var.kvresource_group_name
Add comment 4 Plus location = var.location
Add comment 5 Plus enabled_for_deployment = true
Add comment 6 Plus enabled_for_disk_encryption = true
Add comment 7 Plus enabled_for_template_deployment = true
Add comment 8 Plus tenant_id = var.azure_tenant_id
Add comment 9 Plus tags = var.common_tags
Add comment 10 Plus sku_name = "standard"
Add comment 11 Plus soft_delete_retention_days = 90
Add comment 12 Plus purge_protection_enabled = true
Add comment 13 Plus network_acls {
Add comment 14 Plus bypass = "AzureServices"
Add comment 15 Plus default_action = "Allow"
Add comment 16 Plus ip_rules = local.ip_list
Add comment 17 Plus virtual_network_subnet_ids = var.whitelisted_network_ids
Add comment 18 Plus }
Add comment 19 Plus
Add comment 20 Plus # Admins
Add comment 21 Plus dynamic "access_policy" {
Add comment 22 Plus for_each = local.admins
Add comment 23 Plus content {
Add comment 24 Plus tenant_id = var.azure_tenant_id
Add comment 25 Plus object_id = access_policy.value
Add comment 26 Plus key_permissions = []
Add comment 27 Plus secret_permissions = [
Add comment 28 Plus "Get",
Add comment 29 Plus "List",
Add comment 30 Plus "Set",
Add comment 31 Plus "Delete",
Add comment 32 Plus "Recover",
Add comment 33 Plus "Backup",
Add comment 34 Plus "Restore"
Add comment 35 Plus ]
Add comment 36 Plus certificate_permissions = []
Add comment 37 Plus }
Add comment 38 Plus }
Add comment 39 Plus
Add comment 40 Plus # readers
Add comment 41 Plus dynamic "access_policy" {
Add comment 42 Plus for_each = var.readers
Add comment 43 Plus content {
Add comment 44 Plus tenant_id = var.azure_tenant_id
Add comment 45 Plus object_id = access_policy.value
Add comment 46 Plus key_permissions = []
Add comment 47 Plus secret_permissions = [
Add comment 48 Plus "Get",
Add comment 49 Plus "List"
Add comment 50 Plus ]
Add comment 51 Plus certificate_permissions = []
Add comment 52 Plus }
Add comment 53 Plus }
Add comment 54 Plus }
Add comment 55 Plus
Add comment 56 Plus #G IIS SQL operation permissions on keyvault
Add comment 57 Plus resource "azurerm_role_assignment" "mgmt" {
Add comment 58 Plus scope = azurerm_key_vault.key-vault.id
Add comment 59 Plus role_definition_name = "Key Vault Administrator"
Add comment 60 Plus principal_id = "a6eb261a-8bb5-46fa-b88e-b79b078e7e7f "#data.azuread_group.giissqloperation.id
Add comment 61 Plus }
Add comment 62 Plus
Add comment 63 Plus
Add comment 64 Plus
variables.tf
/terraform_sqlmi/modules/keyvault/variables.tf/terraform_sqlmi/modules/keyvault/variables.tf
output.tf
/terraform_sqlmi/modules/resourcegroup/output.tf/terraform_sqlmi/modules/resourcegroup/output.tf
resourcegroup.tf
/terraform_sqlmi/modules/resourcegroup/resourcegroup.tf/terraform_sqlmi/modules/resourcegroup/resourcegroup.tf
variables.tf
/terraform_sqlmi/modules/resourcegroup/variables.tf/terraform_sqlmi/modules/resourcegroup/variables.tf
storage-contaner.tf
/terraform_sqlmi/modules/storage/storage-container/storage-contaner.tf/terraform_sqlmi/modules/storage/storage-container/storage-contaner.tf
variables.tf
/terraform_sqlmi/modules/storage/storage-container/variables.tf/terraform_sqlmi/modules/storage/storage-container/variables.tf
storage.tf
/terraform_sqlmi/modules/storage/storage.tf/terraform_sqlmi/modules/storage/storage.tf
variables.tf
/terraform_sqlmi/modules/storage/variables.tf/terraform_sqlmi/modules/storage/variables.tf
config.azurerm.tfbackend
/terraform_sqlmi/config.azurerm.tfbackend/terraform_sqlmi/config.azurerm.tfbackend