No requirements.
Name | Version |
---|---|
azurerm | n/a |
random | n/a |
Name | Type |
---|---|
azurerm_management_group_policy_assignment.this | resource |
azurerm_management_group_policy_exemption.this | resource |
azurerm_policy_definition.this | resource |
azurerm_policy_set_definition.this | resource |
azurerm_resource_group_policy_assignment.this | resource |
azurerm_resource_group_policy_exemption.this | resource |
azurerm_subscription_policy_assignment.this | resource |
azurerm_subscription_policy_exemption.this | resource |
random_uuid.assignment | resource |
random_uuid.exemptions | resource |
random_uuid.policy | resource |
azurerm_policy_definition.this | data source |
Name | Description | Type | Default | Required |
---|---|---|---|---|
assignment | (Required) assignment details for the policy. Properties: assignments (Required) - list of assignmentsid (Required) - resource IDname (Required) - friendly name/reference for the assignmentscope (Optional) - resource scope for assignment [Default: rg ] |
object({ |
n/a | yes |
environment | (Required) environment that the initiatives should be applied to. | string |
n/a | yes |
exemptions | (Optional) List of exemption objects Properties: id (Required) - the resource ID for the exemptionrisk_id (Required) - internal risk reference IDscope (Required) - the scope for the exemption (sub, mg, rg)category (Required) - exemption categoryassignment_reference (Required) - assignment friendly name/reference |
list(object({ |
[] |
no |
initiative_definition | (Required) path to the initiative definition file | string |
n/a | yes |
provider "azurerm" {
features {}
}
data "azurerm_resource_group" "this" {
name = "rg-policy"
}
module "global_core" {
source = "../.."
assignment = {
assignments = [{
id = data.azurerm_resource_group.this.id
name = "DefaultRG"
}]
scope = "rg"
}
exemptions = [{
assignment_reference = "DefaultRG"
category = "Mitigated"
id = data.azurerm_resource_group.this.id
risk_id = "R-001"
scope = "rg"
}]
environment = "dev"
initiative_definition = format("%s/initiatives/core.yaml", path.module)
}