Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DEVEX-91] azure_role_assignments module implemented #44

Merged
merged 34 commits into from
Jul 9, 2024

Conversation

christian-calabrese
Copy link
Contributor

@christian-calabrese christian-calabrese commented Jun 14, 2024

List of changes

Implemented the terraform module to allow principals (mostly managed identities and user assigned identities) to read, write or manage the most commonly used resources.

The supported roles for each role assignment are:

  • reader
  • writer
  • owner

As of the time of writing the following resources are supported as scopes of the role assignments:

  • Cosmos DB:
    • Account
    • Database
    • Collections
  • Event Hubs:
    • Namespace
    • Event Hub
  • Key Vault (both RBAC or Access Policies)
    • Secrets
    • Keys
    • Certificates
  • Redis
  • Storage Accounts
    • Queue (all in a storage account or single ones)
    • Table (all in a storage account or single ones)
    • Blob Container (all in a storage account or single ones)

More services that will be implemented in the next future are:

  • Service Bus
  • Function App
  • App Service
  • Notification Hub

Motivation and context

The aim of this module is to simplify the segmented management of RBAC assignments in Azure.

Other information

To request more supported services, please contact the DevEx team

@Krusty93
Copy link
Contributor

Very nice work!

@christian-calabrese christian-calabrese marked this pull request as ready for review July 5, 2024 13:27
@christian-calabrese christian-calabrese requested a review from a team as a code owner July 5, 2024 13:27
@christian-calabrese christian-calabrese merged commit 62a518d into main Jul 9, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants