aztfmod / terraform-azurerm-caf-azure-bastion

Azure Bastion module for Cloud Adoption Framework for Azure landing zones

READ ME

Thanks for your interest in Cloud Adoption Framework for Azure landing zones on Terraform. This module is now deprecated and no longer maintained.

As part of Cloud Adoption Framework landing zones for Terraform, we have migrated to a single module model, which you can find here: https://github.com/aztfmod/terraform-azurerm-caf and on the Terraform registry: https://registry.terraform.io/modules/aztfmod/caf/azurerm

In Terraform 0.13 you can now call directly submodules easily with the following syntax:

module "caf_firewall" {
  source  = "aztfmod/caf/azurerm//modules/networking/firewall"
  version = "0.4.18"
  # insert the 9 required variables here
}

Configures an Azure Bastion

Configures an Azure Bastion environment.

Reference the module to a specific version (recommended):

module "azure_bastion" {
    source  = "aztfmod/azure_bastion/azurerm"
    version = "0.x.y"
    
    bastion_config                   = local.bastion_config
  
    name                             = local.bastion_config.name
    resource_group_name              = azurerm_resource_group.rg_test.name
    subnet_id                        = lookup(module.vnet_test.vnet_subnets, "AzureBastionSubnet", null)
    public_ip_address_id             = module.bastion_pip.id
    location                         = local.location
    tags                             = local.tags
    
    convention                       = local.convention 
    diagnostics_map                  = module.diags_test.diagnostics_map
    log_analytics_workspace          = module.la_test.object
    diagnostics_settings             = local.bastion_config.diagnostics
}

Requirements

No requirements.

Providers

Name	Version
azurerm	n/a

Inputs

Name	Description	Type	Default	Required
bastion_config	(Required) Bastion configuration object	any	n/a	yes
convention	(Required) Naming convention method to use	any	n/a	yes
diagnostics_map	(Required) contains the SA and EH details for operations diagnostics	any	n/a	yes
diagnostics_settings	(Required) configuration object describing the diagnostics	any	n/a	yes
location	(Required) Specifies the Azure location to deploy the resource. Changing this forces a new resource to be created.	any	n/a	yes
log_analytics_workspace	(Required) contains the log analytics workspace details for operations diagnostics	any	n/a	yes
max_length	(Optional) You can speficy a maximum length to the name of the resource	string	""	no
name	(Required) Name for the objects created (before naming convention applied.)	any	n/a	yes
postfix	(Optional) You can use a postfix to the name of the resource	string	""	no
prefix	(Optional) You can use a prefix to the name of the resource	string	""	no
public_ip_address_id	(Required) ID of the Public IP address to use.	any	n/a	yes
resource_group_name	(Required) Name of the resource group where to create the resource. Changing this forces a new resource to be created.	any	n/a	yes
subnet_id	(Required) Subnet ID to plug Azure Bastion.	any	n/a	yes
tags	(Required) Map of tags for the deployment.	any	n/a	yes

Outputs

Name	Description
id	n/a
name	n/a
object	n/a

Parameters

bastion_config

(Required) The configuration object describing the Azure Bastion configuration Mandatory properties are:

• name
• diagnostics

Properties of the IP_addr block are the same as describe in the IP configuration module here

bastion_config = {
        name = "azurebastion"
        diagnostics = {
            log = [
                #["Category name",  "Diagnostics Enabled(true/false)", "Retention Enabled(true/false)", Retention_period] 
                ["BastionAuditLogs", true, true, 30],
            ]
            metric = [
                #    ["AllMetrics", true, true, 30],
            ]
        }
    }