avm-ptn-alz-management
Azure/avm-ptn-alz-management/azurerm
Terraform Azure Verified Pattern Module for ALZ Management
Azure Landing Zones Management Resources AVM Module This module deploys the management resource for Azure Landings Zones. Features - Deployment of Log Analytics Workspace. - Opitional deployment of Azure Automation Account. - Optional deployment of Azure Resource Group. - Customizable Log Analytics Solutions. - Optional deployment of Data Collections Rules. - Optional deployment of User Assigned Managed Identity. Example ``hcl module "avm-ptn-alz-management" { source = "Azure/avm-ptn-alz-management/azurerm" version = " " # change this to your desired version, https://www.terraform.io/language/expressions/version-constraints automation_account_name = "aa-prod-eus-001" location = "eastus" log_analytics_workspace_name = "law-prod-eus-001" resource_group_name = "rg-management-eus-001" } `` Req
| Name | Type | Description | Default |
|---|---|---|---|
| resource_group_name | string | The name of the Azure Resource Group where the resources will be created. | required |
| location | string | The Azure region where the resources will be deployed. | required |
| automation_account_name | string | The name of the Azure Automation Account to create. | required |
| log_analytics_workspace_retention_in_days | number | The number of days to retain data for the Log Analytics Workspace. | 30 |
| automation_account_identity | object({ type = st | The identity to assign to the Azure Automation Account. | null |
| enable_telemetry | bool | This variable controls whether or not telemetry is enabled for the module. For m | true |
| log_analytics_workspace_creation_enabled | bool | Whether or not to create a Log Analytics Workspace. | true |
| log_analytics_workspace_internet_ingestion_enabled | bool | Whether or not internet ingestion is enabled for the Log Analytics Workspace. | true |
| log_analytics_workspace_local_authentication_enabled | bool | Whether or not local authentication is enabled for the Log Analytics Workspace. | true |
| automation_account_location | string | The Azure region of the Azure Automation Account to deploy. This supports overri | null |
| linked_automation_account_creation_enabled | bool | A boolean flag to determine whether to deploy the Azure Automation Account linke | false |
| tags | map(string) | A map of tags to apply to the resources created. | null |
| user_assigned_managed_identities | object({ ama = object({ | Enables customisation of the user assigned managed identities. The value of thi | {
"ama": {
"name": "uami-ama"
}
|
| log_analytics_workspace_reservation_capacity_in_gb_per_day | number | The reservation capacity in GB per day for the Log Analytics Workspace. | null |
| resource_group_creation_enabled | bool | A boolean flag to determine whether to deploy the Azure Resource Group or not. | true |
| timeouts | object({ sentinel_onboardi | A map of timeouts to apply to the creation and destruction of resources. If usin | {} |
| automation_account_sku_name | string | The name of the SKU for the Azure Automation Account to create. | "Basic" |
| log_analytics_workspace_cmk_for_query_forced | bool | Whether or not to force the use of customer-managed keys for query in the Log An | null |
| log_analytics_workspace_id | string | The ID of the pre-existing Log Analytics Workspace to use. Required if `log_anal | null |
| log_analytics_workspace_sku | string | The SKU to use for the Log Analytics Workspace. | "PerGB2018" |
| automation_account_public_network_access_enabled | bool | Whether or not public network access is enabled for the Azure Automation Account | true |
| log_analytics_solution_plans | list(object({ product = | The Log Analytics Solution Plans to create. Do not add the SecurityInsights solu | [
{
"product": "OMSGallery/Contain |
| log_analytics_workspace_daily_quota_gb | number | The daily ingestion quota in GB for the Log Analytics Workspace. | null |
log_analytics_workspace — A curated output of the Log Analytics Workspace.log_analytics_workspace_keys — Sensitive values for the Log Analytics Workspace.resource_group — A curated output of the Azure Resource Group.resource_id — The resource ID of the Log Analytics Workspace.user_assigned_identity_ids — User assigned identity IDs.automation_account — A curated output of the Azure Automation Account.automation_account_dsc_keys — Sensitive values for the Azure Automation Account.data_collection_rule_ids — Data Collection Rule Resource Ids.