avm-res-keyvault-vault
Azure/avm-res-keyvault-vault/azurerm
Terraform Azure Verified Resource Module for Key Vault
terraform-azurerm-avm-res-keyvault-vault Module to deploy key vaults, keys and secrets in Azure. Requirements The following requirements are needed by this module: - terraform (>= 1.9, azapi (~> 2.4) - azurerm (>= 3.117, modtm (~> 0.3) - random (~> 3.5) - time (~> 0.9) Resources The following resources are used by this module: - azurerm_key_vault.this (resource) - azurerm_key_vault_access_policy.this (resource) - azurerm_key_vault_certificate_contacts.this (resource) - azurerm_management_lock.this (resource) - azurerm_monitor_diagnostic_setting.this (resource) - azurerm_private_endpoint.this (resource) - azurerm_private_endpoint.this_unmanaged_dns_zone_groups (resource) - azurerm_private_endpoint_application_security_group_association.this (resource) - azurerm_role_assignment.this (resourc
| Name | Type | Description | Default |
|---|---|---|---|
| location | string | The Azure location where the resources will be deployed. | |
| name | string | The name of the Key Vault. | |
| resource_group_name | string | The resource group where the resources will be deployed. | |
| tenant_id | string | The Azure tenant ID used for authenticating requests to Key Vault. You can use t | |
| legacy_access_policies_enabled | bool | Specifies whether legacy access policies are enabled for this Key Vault. Prevent | false |
| contacts | map(object({ email = strin | A map of contacts for the Key Vault. The map key is deliberately arbitrary to av | {} |
| diagnostic_settings | map(object({ name | A map of diagnostic settings to create on the Key Vault. The map key is delibera | {} |
| enable_telemetry | bool | This variable controls whether or not telemetry is enabled for the module. For m | true |
| keys | map(object({ name = st | A map of keys to create on the Key Vault. The map key is deliberately arbitrary | {} |
| secrets | map(object({ name | A map of secrets to create on the Key Vault. The map key is deliberately arbitra | {} |
| secrets_value | map(string) | A map of secret keys to values. The map key is the supplied input to `var.secret | null |
| enabled_for_template_deployment | bool | Specifies whether Azure Resource Manager is permitted to retrieve secrets from t | false |
| legacy_access_policies | map(object({ object_id | A map of legacy access policies to create on the Key Vault. The map key is delib | {} |
| lock | object({ kind = string | The lock level to apply to the Key Vault. Default is `None`. Possible values are | null |
| sku_name | string | The SKU name of the Key Vault. Default is `premium`. Possible values are `standa | "premium" |
| soft_delete_retention_days | number | The number of days that items should be retained for once soft-deleted. This val | null |
| tags | map(string) | Map of tags to assign to the Key Vault resource. | null |
| wait_for_rbac_before_contact_operations | object({ create = optiona | This variable controls the amount of time to wait before performing contact oper | {} |
| wait_for_rbac_before_key_operations | object({ create = optiona | This variable controls the amount of time to wait before performing key operatio | {} |
| enabled_for_deployment | bool | Specifies whether Azure Virtual Machines are permitted to retrieve certificates | false |
| enabled_for_disk_encryption | bool | Specifies whether Azure Disk Encryption is permitted to retrieve secrets from th | false |
| network_acls | object({ bypass | The network ACL configuration for the Key Vault. If not specified then the Key V | {} |
| private_endpoints | map(object({ name = option | A map of private endpoints to create on the Key Vault. The map key is deliberate | {} |
| private_endpoints_manage_dns_zone_group | bool | Whether to manage private DNS zone groups with this module. If set to false, you | true |
secrets_resource_ids — A map of secret keys to resource ids.uri — The URI of the vault for performing operations on keys and secretskeys — A map of key keys to key values. The key value is the entire azurerm_key_vault_key resource.
The kekeys_resource_ids — A map of key keys to resource ids.name — The name of the key vault.private_endpoints — A map of private endpoints. The map key is the supplied input to var.private_endpoints. The map valuresource_id — The Azure resource id of the key vault.secrets — A map of secret keys to secret values. The secret value is the entire azurerm_key_vault_secret resouAzure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Azure Verified Pattern Module for Azure Landing Zone