Skip to content

Latest commit

 

History

History
81 lines (66 loc) · 3.69 KB

README.md

File metadata and controls

81 lines (66 loc) · 3.69 KB
Raw

Gitter

Configures an Azure Bastion

Configures an Azure Bastion environment.

Reference the module to a specific version (recommended):

module "azure_bastion" {
    source  = "aztfmod/azure_bastion/azurerm"
    version = "0.x.y"
    
    bastion_config                   = local.bastion_config
  
    name                             = local.bastion_config.name
    resource_group_name              = azurerm_resource_group.rg_test.name
    subnet_id                        = lookup(module.vnet_test.vnet_subnets, "AzureBastionSubnet", null)
    public_ip_address_id             = module.bastion_pip.id
    location                         = local.location
    tags                             = local.tags
    
    convention                       = local.convention 
    diagnostics_map                  = module.diags_test.diagnostics_map
    log_analytics_workspace          = module.la_test.object
    diagnostics_settings             = local.bastion_config.diagnostics
}

Inputs

Name Type Default Description
enable_bastion bool True (Optional) Determine to deploy Bastion for the configuration.
subnet_id string None (Required) Subnet ID to plug Azure Bastion.
public_ip_address_id string None (Required) ID of hte Public IP address to use.
bastion_config object None (Required) Bastion configuration object.
resource_group_name string None (Required) Name of the resource group where to create the resource. Changing this forces a new resource to be created.
name string None (Required) Name for the objects created (before naming convention applied.)
location string None (Required) Specifies the Azure location to deploy the resource. Changing this forces a new resource to be created.
tags map None (Required) Map of tags for the deployment.
convention string None (Required) Naming convention to be used (check at the naming convention module for possible values).
prefix string None (Optional) Prefix to be used.
postfix string None (Optional) Postfix to be used.
max_length string None (Optional) maximum length to the name of the resource.
log_analytics_workspace string None Log Analytics Workspace.
diagnostics_map map None Map with the diagnostics repository information.
diagnostics_settings object None Map with the diagnostics settings. See the required structure in the following example or in the diagnostics module documentation.

Parameters

bastion_config

(Required) The configuration object describing the Azure Bastion configuration Mandatory properties are:

  • name
  • diagnostics

Properties of the IP_addr block are the same as describe in the IP configuration module here

bastion_config = {
        name = "azurebastion"
        diagnostics = {
            log = [
                #["Category name",  "Diagnostics Enabled(true/false)", "Retention Enabled(true/false)", Retention_period] 
                ["BastionAuditLogs", true, true, 30],
            ]
            metric = [
                #    ["AllMetrics", true, true, 30],
            ]
        }
    }

Outputs

Name Type Description
id map Returns the id of the bastion configuration
name map Returns the name of the bastion configuration
object map Returns the object of the bastion configuration