avm-ptn-aiml-ai-foundry
Azure/avm-ptn-aiml-ai-foundry/azurerm
Terraform Azure Verified Pattern Module for Azure AI Foundry Pattern
Azure AI Foundry Pattern Module This Azure Verified Module (AVM) deploys Azure AI Foundry along with essential and optional supporting services to enable scalable AI application development. It provisions core resources such as the AI Foundry account, projects, agent service, RBACs, and resource locks, which are always deployed for baseline functionality. The module also supports supplemental infrastructure, like networking, compute, and monitoring, through dependent resources, and offers flexibility to either deploy or integrate existing services (BYOR) such as Key Vault, Storage Account, Cosmos DB, and AI Search. These BYOR resources can be provided externally or deployed via the module itself. Example deployment configurations range from minimal public setups to enterprise-grade private
| Name | Type | Description | Default |
|---|---|---|---|
| location | string | Azure region where the resource should be deployed. | required |
| resource_group_resource_id | string | The resource group resource id where the module resources will be deployed. | required |
| base_name | string | The name prefix for the AI Foundry resources. | required |
| ai_foundry | object({ name | Configuration object for the Azure AI Foundry service to be created for AI workl | {} |
| tags | map(string) | (Optional) Tags to be applied to all resources. | null |
| ai_search_definition | map(object({ existing_reso | Configuration object for the Azure AI Search service to be created as part of th | {} |
| storage_account_definition | map(object({ existing_reso | Configuration object for the Azure Storage Account to be created for GenAI servi | {} |
| create_byor | bool | Whether to create resources such as AI Search, Cosmos DB, Key Vault, and Storage | false |
| create_private_endpoints | bool | Whether to create private endpoints for AI Foundry, Cosmos DB, Key Vault, and AI | false |
| enable_telemetry | bool | This variable controls whether or not telemetry is enabled for the module. For m | true |
| resource_names | object({ ai_agent_host | Custom names for each resource. If not provided, names will be generated using b | {} |
| cosmosdb_definition | map(object({ existing_reso | Configuration object for the Azure Cosmos DB account to be created for GenAI ser | {} |
| key_vault_definition | map(object({ existing_reso | Configuration object for the Azure Key Vault to be created for GenAI services. | {} |
| cognitive_services_api_version | string | API version used for Microsoft.CognitiveServices account resources. Use `2025-07 | "2025-10-01-preview" |
| private_endpoint_subnet_resource_id | string | (Optional) The subnet ID for private endpoints. | null |
| ai_projects | map(object({ name | Configuration map for AI Foundry projects to be created. Each project can have i | {} |
| ai_model_deployments | map(object({ name | Configuration for AI model deployments (including OpenAI). Each deployment inclu | {} |
| diagnostic_settings | map(object({ name | A map of diagnostic settings to create on the AI Foundry account (Cognitive Serv | {} |
ai_foundry_project_internal_id — The internal ID of the AI Foundry project used for container naming.ai_foundry_project_system_identity_principal_id — The principal ID of the AI Foundry project's system-assigned managed identity.ai_model_deployment_ids — The resource IDs of all AI model deployments.key_vault_id — The resource ID of the Key Vault.key_vault_name — The name of the Key Vault.resource_group_name — The name of the resource group.storage_account_id — The resource ID of the storage account.storage_account_name — The name of the storage account.ai_agent_account_capability_host_id — The resource ID of the account-level AI agent capability host.ai_search_id — The resource ID of the AI Search service.cosmos_db_name — The name of the Cosmos DB account.project_id_guid — The project ID formatted as GUID for container naming (only available when AI agent service is enablai_agent_service_id — The resource ID of the AI agent capability host.ai_foundry_encryption_status — The encryption configuration status of the AI Foundry account.ai_foundry_name — The name of the AI Foundry account.ai_foundry_project_id — The resource ID of the AI Foundry Project.ai_foundry_id — The resource ID of the AI Foundry account.ai_foundry_project_name — The name of the AI Foundry Project.ai_search_name — The name of the AI Search service.cosmos_db_id — The resource ID of the Cosmos DB account.resource_group_id — The resource ID of the resource group.resource_id — The resource IDs of the AI Foundry resource.