Creates one or multiple resource groups.
The following requirements are needed by this module:
The following providers are used by this module:
- azurerm (>= 3.71.0)
The following resources are used by this module:
- azurerm_management_lock.this (resource)
- azurerm_resource_group.this (resource)
- azurerm_role_assignment.this (resource)
The following input variables are required:
Description: Azure region where the resource should be deployed.
Type: string
Description: The name of the resource group.
Type: string
The following input variables are optional (have default values):
Description: The lock level to apply. Default is None
. Possible values are None
, CanNotDelete
, and ReadOnly
.
Type:
object({
name = optional(string, null)
kind = optional(string, "None")
})
Default: {}
Description: A map of role assignments to create on this resource. The map key is deliberately arbitrary to avoid issues where map keys maybe unknown at plan time.
role_definition_id_or_name
- The ID or name of the role definition to assign to the principal.principal_id
- The ID of the principal to assign the role to.description
- The description of the role assignment.skip_service_principal_aad_check
- If set to true, skips the Azure Active Directory check for the service principal in the tenant. Defaults to false.condition
- The condition which will be used to scope the role assignment.condition_version
- The version of the condition syntax. Valid values are '2.0'.
Note: only set
skip_service_principal_aad_check
to true if you are assigning a role to a service principal.
Type:
map(object({
role_definition_id_or_name = string
principal_id = string
description = optional(string, null)
skip_service_principal_aad_check = optional(bool, false)
condition = optional(string, null)
condition_version = optional(string, null)
delegated_managed_identity_resource_id = optional(string, null)
}))
Default: {}
Description: The map of tags to be applied to the resource
Type: map(any)
Default: {}
The following outputs are exported:
Description: This is the full output for the resource.
No modules.