-
Notifications
You must be signed in to change notification settings - Fork 578
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add management landing zone resources (#69)
- Adds support for Terraform `v0.15.0` - Adds "Management resources" capability to enable deploying the "Management landing zone", including: - Log Analytics workspace - Automation Account (integrated with Log Analytics workspace) - Recommended Log Analytics solutions - Automated integration of Log Analytics workspace config into Policy Assignments - "Feature switches" to control additional Policy Assignment settings relating to the Management capabilities - Documentation to reflect additions, including update to release v0.2.0 - Remove `Deploy-Diagnostics-PublicIP` Policy Definition (now built-in) - Add multiple Policy Definitions for ASC Defender configuration - Replace `Deploy-ASC-Standard` Policy Definition with `Deploy-ASC-Config` Policy Set Definition - Update Log Analytics workspace configuration settings in `Deploy-Log-Analytics` Policy Definition - Fix incorrect logic for handling `enforcement_mode` setting for Policy Assignments - Remove deprecated `skip_service_principal_aad_check` setting from Role Assignments - Update minimum supported AzureRM provider version to `v2.41.0`
- Loading branch information
Kevin Rowlandson
authored
Apr 28, 2021
1 parent
42eb5bd
commit e5d7b67
Showing
49 changed files
with
2,635 additions
and
683 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,63 @@ | ||
| # The following locals are used to extract the Log Analytics | ||
| # configuration from the solution module outputs. | ||
| locals { | ||
| es_log_analytics_workspaces = module.management_resources.configuration.azurerm_log_analytics_workspace | ||
| } | ||
|
|
||
| # The following locals are used to build the map of Log | ||
| # Analytics workspaces to deploy. | ||
| locals { | ||
| azurerm_log_analytics_workspace_enterprise_scale = { | ||
| for resource in local.es_log_analytics_workspaces : | ||
| resource.resource_id => resource | ||
| if resource.managed_by_module | ||
| } | ||
| } | ||
|
|
||
| # The following locals are used to extract the Log Analytics | ||
| # Solutions configuration from the solution module outputs. | ||
| locals { | ||
| es_log_analytics_solution = module.management_resources.configuration.azurerm_log_analytics_solution | ||
| } | ||
|
|
||
| # The following locals are used to build the map of Log | ||
| # Analytics workspaces to deploy. | ||
| locals { | ||
| azurerm_log_analytics_solution_enterprise_scale = { | ||
| for resource in local.es_log_analytics_solution : | ||
| resource.resource_id => resource | ||
| if resource.managed_by_module | ||
| } | ||
| } | ||
|
|
||
| # The following locals are used to extract the Automation | ||
| # Account configuration from the solution module outputs. | ||
| locals { | ||
| es_automation_account = module.management_resources.configuration.azurerm_automation_account | ||
| } | ||
|
|
||
| # The following locals are used to build the map of Log | ||
| # Analytics workspaces to deploy. | ||
| locals { | ||
| azurerm_automation_account_enterprise_scale = { | ||
| for resource in local.es_automation_account : | ||
| resource.resource_id => resource | ||
| if resource.managed_by_module | ||
| } | ||
| } | ||
|
|
||
| # The following locals are used to extract the Log Analytics | ||
| # Linked Service configuration from the solution module outputs. | ||
| locals { | ||
| es_log_analytics_linked_service = module.management_resources.configuration.azurerm_log_analytics_linked_service | ||
| } | ||
|
|
||
| # The following locals are used to build the map of Log | ||
| # Analytics workspaces to deploy. | ||
| locals { | ||
| azurerm_log_analytics_linked_service_enterprise_scale = { | ||
| for resource in local.es_log_analytics_linked_service : | ||
| resource.resource_id => resource | ||
| if resource.managed_by_module | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.