Skip to content

Commit

Permalink
chore: repaired tables and columns in docu files
Browse files Browse the repository at this point in the history
  • Loading branch information
florianow committed Nov 6, 2023
1 parent f6cde5c commit 2740c71
Show file tree
Hide file tree
Showing 3 changed files with 15 additions and 8 deletions.
12 changes: 8 additions & 4 deletions kit/azure/billing/documentation.tf
Original file line number Diff line number Diff line change
@@ -1,22 +1,26 @@
output "documentation_md" {
value = <<EOF
# Billing
It is recommended to use payment methods such as credit cards and invoices to ensure that you can access your Azure resources at any time.
The kit provides a first-of-its-kind cost alert for the entire Cloud Foundation.
## Who is informed about costs?
The following people will be notified when the established cost limit is exceeded:
${join("\n", formatlist("- %s", var.contact_mails))}
## How I can get access?
The kit creates two Groups as preparation for the Privileged Access Mananganmet.
| group | role |
---------------------------------------------------------------
|group|role|
|-|-|
| cloudfoundation-billing-admins | Cost Management Contributor, Management Group Reader |
| cloudfoundation-billing-readers | Cost Management Reader, Management Group Reader |
[Privileged Access Mananganmet](https://cloudfoundation.org/maturity-model/iam/privileged-access-management.html#what-is-privileged-access-management-pam)
TODO: describe the deployed resources and its configuration in a human-friendly way.
EOF
}
7 changes: 5 additions & 2 deletions kit/azure/logging/documentation.tf
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
output "documentation_md" {
value = <<EOF
# Logging
All actions performed on Azure resources in any subscription are logged in a central [log analytics workspace](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-workspace-overview).
Expand All @@ -10,10 +11,12 @@ This is enforced via an Azure Policy called `${module.policy_law.policy_assignme
The log analytics workspace collects Activity Logs, which are [platform logs](https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/platform-logs-overview).
## How can I get access?
The kit creates two Groups as preparation for the Privileged Access Mananganmet.
| group | role |
---------------------------------------------------------------
|group|role|
|-|-|
| cloudfoundation-security-admins | Log Analytics Contributor |
| cloudfoundation-secuirty-readers | Log Analytics Reader |
Expand Down
4 changes: 2 additions & 2 deletions kit/azure/pam/documentation.tf
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@ output "documentation_md" {
The following groups are used for managing privileged access to the cloud foundation.
| Group | Member | Function | Object ID |
|----------------------------------------------|------------------------------------------------------------------------|--------------------------------------------------------------------------|-----------|
|Group|Member|Function|Object ID|
|-|-|-|-|
| `${var.platform_engineer.group.display_name}` | ${join("\n", formatlist("- %s", var.platform_engineer.group.member))} | group is used to grant privileged access to members of the cloud foundation team. | `${var.platform_engineer.group.object_id}` |
| `${var.security_admin.group.display_name}` | ${join("\n", formatlist("- %s", var.security_admin_members[*].email))} | Responsible for administrate ensuring compliance and security across cloud resources. | `${var.security_admin.group.object_id}` |
| `${var.security_auditor.group.display_name}` | ${join("\n", formatlist("- %s", var.security_auditor_members[*].email))} | Responsible for ensuring compliance and security across cloud resources. | `${var.security_auditor.group.object_id}` |
Expand Down

0 comments on commit 2740c71

Please sign in to comment.