Note
This repository is publicly accessible as part of our open-source initiative. We welcome contributions from the community alongside our organization's primary development efforts.
Terraform Module Template
This example demonstrates the usage of this Terraform module with default settings.
module "example" {
# Change "module" and "provider" accordingly to match you new module
source = "cloudeteer/module/provider"
tenant_id = "00000000-0000-0000-0000-000000000000"
sentinel_serviceprincipal_id = "11111111-1111-1111-1111-111111111111"
}The following providers are used by this module:
The following resources are used by this module:
- azurerm_key_vault.secrets (resource)
- azurerm_log_analytics_workspace.logs (resource)
- azurerm_monitor_diagnostic_setting.sentinel_auditing (resource)
- azurerm_resource_group.vsoc_service (resource)
- azurerm_role_assignment.sentinel_playbook_permissions (resource)
- azurerm_sentinel_log_analytics_workspace_onboarding.sentinel (resource)
- random_string.key_vault_suffix (resource)
The following input variables are required:
Description: The Sentinel Service principal ID.
Type: string
Description: The Azure Active Directory tenant ID.
Type: string
The following input variables are optional (have default values):
Description: The Azure region for the resources to be deployed.
Type: string
Default: "germanywestcentral"
Description: Bypass value for the Key Vault.
Type: string
Default: "AzureServices"
Description: Default action for the Key Vault.
Type: string
Default: "Deny"
Description: IP Rules for the Key Vault
Type: list(string)
Default: []
Description: The name of the Key Vault.
Type: string
Default: "kvvsocdevgwc"
Description: The SKU (plan) for the Key Vault.
Type: string
Default: "standard"
Description: VNet IDs for the Key Vault.
Type: list(string)
Default: []
Description: The name of the Log Analytics Workspace.
Type: string
Default: "log-vsoc-dev-gwc-01"
Description: Number of days to retain log data. Valid range: 30 to 730 (2 years).
Type: number
Default: 90
Description: Pricing tier for the Log Analytics Workspace.
Type: string
Default: "PerGB2018"
Description: Flag if purge protection is enabled.
Type: bool
Default: true
Description: The name of the resource group.
Type: string
Default: "rg-vsoc-dev-gwc-01"
Description: Enable customer managed key for Sentinel
Type: bool
Default: false
Description: Retention Time for Logs in the Log Analytics Workspace.
Type: number
Default: 7
Description: Custom tags to merge with module defaults.
Type: map(string)
Default: {}
The following outputs are exported:
Description: The ID of the Log Analytics Workspace
Description: The Name of the Log Analytics Workspace
We welcome all kinds of contributions, whether it's reporting bugs, submitting feature requests, or directly contributing to the development. Please read our Contributing Guidelines to learn how you can best contribute.
Thank you for your interest and support!
© 2024 CLOUDETEER GmbH
This project is licensed under the MIT License.