Terraform Azure Provider

https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs
Admin
The Terraform Azure Provider enables infrastructure provisioning and management in Microsoft Azure...
Tokens:133,136
Snippets:1,633
Trust Score:10
Update:1 month ago
Show doc for...
Tokens:
Raw
### Configure App Service Source Control

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/app_service_source_control

Example showing the setup of a Linux Web App with source control linked to a GitHub repository.

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_service_plan" "example" {
  name                = "example"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  os_type             = "Linux"
  sku_name            = "P1v2"
}

resource "azurerm_linux_web_app" "example" {
  name                = "example"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_service_plan.example.location
  service_plan_id     = azurerm_service_plan.example.id

  site_config {}
}

resource "azurerm_app_service_source_control" "example" {
  app_id   = azurerm_linux_web_app.example.id
  repo_url = "https://github.com/Azure-Samples/python-docs-hello-world"
  branch   = "master"
}
```

--------------------------------

### Example Subscription List Output

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_secret

Sample JSON output from the account list command showing subscription details.

```json
[
  {
    "cloudName": "AzureCloud",
    "id": "20000000-0000-0000-0000-000000000000",
    "isDefault": true,
    "name": "PAYG Subscription",
    "state": "Enabled",
    "tenantId": "10000000-0000-0000-0000-000000000000",
    "user": {
      "name": "user@example.com",
      "type": "user"
    }
  }
]
```

--------------------------------

### Configure Function App Connection Resources

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app_connection

This example illustrates the creation of necessary infrastructure components including a resource group, Cosmos DB, storage account, and a function app.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_cosmosdb_account" "example" {
  name                = "example-cosmosdb-account"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  offer_type          = "Standard"
  kind                = "GlobalDocumentDB"

  consistency_policy {
    consistency_level       = "BoundedStaleness"
    max_interval_in_seconds = 10
    max_staleness_prefix    = 200
  }

  geo_location {
    location          = azurerm_resource_group.example.location
    failover_priority = 0
  }
}

resource "azurerm_cosmosdb_sql_database" "example" {
  name                = "cosmos-sql-db"
  resource_group_name = azurerm_cosmosdb_account.example.resource_group_name
  account_name        = azurerm_cosmosdb_account.example.name
  throughput          = 400
}

resource "azurerm_cosmosdb_sql_container" "example" {
  name                = "example-container"
  resource_group_name = azurerm_cosmosdb_account.example.resource_group_name
  account_name        = azurerm_cosmosdb_account.example.name
  database_name       = azurerm_cosmosdb_sql_database.example.name
  partition_key_path  = "/definition"
}

resource "azurerm_storage_account" "example" {
  name                     = "examplestorageaccount"
  resource_group_name      = azurerm_resource_group.example.name
  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "LRS"
}

resource "azurerm_service_plan" "example" {
  location            = azurerm_resource_group.example.location
  name                = "example-serviceplan"
  resource_group_name = azurerm_resource_group.example.name
  sku_name            = "P1v2"
  os_type             = "Linux"
}

resource "azurerm_function_app" "test" {
  name                       = "example-function-app"
  location                   = azurerm_resource_group.test.location
  resource_group_name        = azurerm_resource_group.test.name
  app_service_plan_id        = azurerm_app_service_plan.test.id
  storage_account_name       = azurerm_storage_account.test.name
  storage_account_access_key = azurerm_storage_account.test.primary_access_key

  lifecycle {
    ignore_changes = [
      identity,
    ]
  }
}
```

--------------------------------

### Configure Web App Active Slot for Windows and Linux

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/web_app_active_slot

Examples demonstrating how to set an active slot for both Windows and Linux web app environments.

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_service_plan" "example" {
  name                = "example-plan"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  os_type             = "Windows"
  sku_name            = "P1v2"
}

resource "azurerm_windows_web_app" "example" {
  name                = "example-windows-web-app"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_service_plan.example.location
  service_plan_id     = azurerm_service_plan.example.id

  site_config {}
}

resource "azurerm_windows_web_app_slot" "example" {
  name           = "example-windows-web-app-slot"
  app_service_id = azurerm_windows_web_app.example.name

  site_config {}
}

resource "azurerm_web_app_active_slot" "example" {
  slot_id = azurerm_windows_web_app_slot.example.id

}
```

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_service_plan" "example" {
  name                = "example-plan"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  os_type             = "Linux"
  sku_name            = "P1v2"
}

resource "azurerm_linux_web_app" "example" {
  name                = "example-linux-web-app"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_service_plan.example.location
  service_plan_id     = azurerm_service_plan.example.id

  site_config {}
}

resource "azurerm_linux_web_app_slot" "example" {
  name             = "example-linux-web-app-slot"
  app_service_name = azurerm_linux_web_app.example.name
  location         = azurerm_service_plan.example.location
  service_plan_id  = azurerm_service_plan.example.id

  site_config {}
}

resource "azurerm_web_app_active_slot" "example" {
  slot_id = azurerm_linux_web_app_slot.example.id
}
```

--------------------------------

### Configure App Service Source Control Slot

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/app_service_source_control_slot

Example demonstrating the creation of a resource group, service plan, Linux web app, and a deployment slot.

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_service_plan" "example" {
  name                = "example-plan"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  os_type             = "Linux"
  sku_name            = "P1v2"
}

resource "azurerm_linux_web_app" "example" {
  name                = "example-web-app"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_service_plan.example.location
  service_plan_id     = azurerm_service_plan.example.id

  site_config {}
}

resource "azurerm_linux_web_app_slot" "example" {
  name           = "example-slot"
  app_service_id = azurerm_linux_web_app.example.id

  site_config {}
}
```

--------------------------------

### Configure Azure AD Diagnostic Setting

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_aad_diagnostic_setting

Example showing the creation of a diagnostic setting that sends logs to a storage account.

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-rg"
  location = "west europe"
}

resource "azurerm_storage_account" "example" {
  name                     = "examplestorageaccount"
  resource_group_name      = azurerm_resource_group.example.name
  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_kind             = "StorageV2"
  account_replication_type = "LRS"
}

resource "azurerm_monitor_aad_diagnostic_setting" "example" {
  name               = "setting1"
  storage_account_id = azurerm_storage_account.example.id
  enabled_log {
    category = "SignInLogs"
  }
  enabled_log {
    category = "AuditLogs"
  }
  enabled_log {
    category = "NonInteractiveUserSignInLogs"
  }
  enabled_log {
    category = "ServicePrincipalSignInLogs"
  }
}
```

--------------------------------

### Retrieve Action Group Properties

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/monitor_action_group

Example showing how to fetch an existing Action Group by name and resource group, and output its ID.

```hcl
data "azurerm_monitor_action_group" "example" {
  resource_group_name = "terraform-example-rg"
  name                = "tfex-actiongroup"
}

output "action_group_id" {
  value = data.azurerm_monitor_action_group.example.id
}
```

--------------------------------

### Retrieve Azure Monitor Workspace information

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/monitor_workspace

Example showing how to fetch an existing Azure Monitor Workspace and output its query endpoint.

```hcl
data "azurerm_monitor_workspace" "example" {
  name                = "example-workspace"
  resource_group_name = azurerm_resource_group.example.name
}

output "query_endpoint" {
  value = data.azurerm_monitor_workspace.example.query_endpoint
}
```

--------------------------------

### Retrieve Role Assignments

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/role_assignments

Example demonstrating how to fetch role assignments for a specific resource group scope.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example"
  location = "West Europe"
}

data "azurerm_role_assignments" "example" {
  scope = azurerm_resource_group.example.id
}

output "id" {
  value = data.azurerm_role_assignments.example.role_assignments
}
```

--------------------------------

### Create an azurerm_monitor_scheduled_query_rules_alert_v2 resource

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_scheduled_query_rules_alert_v2

Example configuration for setting up a scheduled query rule with associated identity, action group, and criteria.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_application_insights" "example" {
  name                = "example-ai"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  application_type    = "web"
}

resource "azurerm_monitor_action_group" "example" {
  name                = "example-mag"
  resource_group_name = azurerm_resource_group.example.name
  short_name          = "test mag"
}

resource "azurerm_user_assigned_identity" "example" {
  name                = "example-uai"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
}

resource "azurerm_role_assignment" "example" {
  scope                = azurerm_application_insights.example.id
  role_definition_name = "Reader"
  principal_id         = azurerm_user_assigned_identity.example.principal_id
}

resource "azurerm_monitor_scheduled_query_rules_alert_v2" "example" {
  name                = "example-msqrv2"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location

  evaluation_frequency = "PT10M"
  window_duration      = "PT10M"
  scopes               = [azurerm_application_insights.example.id]
  severity             = 4
  criteria {
    query                   = <<-QUERY
      requests
        | summarize CountByCountry=count() by client_CountryOrRegion
      QUERY
    time_aggregation_method = "Maximum"
    threshold               = 17.5
    operator                = "LessThan"

    resource_id_column    = "client_CountryOrRegion"
    metric_measure_column = "CountByCountry"
    dimension {
      name     = "client_CountryOrRegion"
      operator = "Exclude"
      values   = ["123"]
    }
    failing_periods {
      minimum_failing_periods_to_trigger_alert = 1
      number_of_evaluation_periods             = 1
    }
  }

  auto_mitigation_enabled          = true
  workspace_alerts_storage_enabled = false
  description                      = "example sqr"
  display_name                     = "example-sqr"
  enabled                          = true
  query_time_range_override        = "PT1H"
  skip_query_validation            = true
  action {
    action_groups = [azurerm_monitor_action_group.example.id]
    custom_properties = {
      key  = "value"
      key2 = "value2"
    }
    email_subject = "Email Header"
  }

  identity {
    type = "UserAssigned"
    identity_ids = [
      azurerm_user_assigned_identity.example.id,
    ]
  }
  tags = {
    key  = "value"
    key2 = "value2"
  }

  depends_on = [azurerm_role_assignment.example]
}
```

--------------------------------

### List Service Plans

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/list-resources/service_plan

Examples for retrieving Service Plans either globally or filtered by a resource group.

```hcl
list "azurerm_service_plan" "example" {
  provider = azurerm
  config {}
}
```

```hcl
list "azurerm_service_plan" "example" {
  provider = azurerm
  config {
    resource_group_name = "example-rg"
  }
}
```

--------------------------------

### Basic Azure Provider Configuration

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/aks_workload_identity

Standard setup for the Azure provider using the required_providers block.

```hcl
terraform {
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "=5.0.0"
    }
  }
}

# Configure the Microsoft Azure Provider
provider "azurerm" {
  features {}
}
```

--------------------------------

### Configure AutoScale Setting for a Virtual Machine Scale Set

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_autoscale_setting

This example demonstrates how to define an autoscale setting for a Linux virtual machine scale set, including capacity profiles, metric-based scaling rules, and predictive scaling.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "autoscalingTest"
  location = "West Europe"
}

resource "azurerm_virtual_network" "example" {
  name                = "acctvn"
  address_space       = ["10.0.0.0/16"]
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
}

resource "azurerm_subnet" "example" {
  name                 = "acctsub"
  resource_group_name  = azurerm_resource_group.example.name
  virtual_network_name = azurerm_virtual_network.example.name
  address_prefixes     = ["10.0.2.0/24"]
}

resource "azurerm_linux_virtual_machine_scale_set" "example" {
  name                = "exampleset"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  upgrade_mode        = "Manual"
  sku                 = "Standard_F2"
  instances           = 2
  admin_username      = "myadmin"

  admin_ssh_key {
    username   = "myadmin"
    public_key = "ssh-rsa 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 hello@world.com"
  }

  network_interface {
    name    = "TestNetworkProfile"
    primary = true

    ip_configuration {
      name      = "TestIPConfiguration"
      primary   = true
      subnet_id = azurerm_subnet.example.id
    }
  }

  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "StandardSSD_LRS"
  }

  source_image_reference {
    publisher = "Canonical"
    offer     = "0001-com-ubuntu-server-jammy"
    sku       = "22_04-lts"
    version   = "latest"
  }

  lifecycle {
    ignore_changes = ["instances"]
  }
}

resource "azurerm_monitor_autoscale_setting" "example" {
  name                = "myAutoscaleSetting"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  target_resource_id  = azurerm_linux_virtual_machine_scale_set.example.id

  profile {
    name = "defaultProfile"

    capacity {
      default = 1
      minimum = 1
      maximum = 10
    }

    rule {
      metric_trigger {
        metric_name        = "Percentage CPU"
        metric_resource_id = azurerm_linux_virtual_machine_scale_set.example.id
        time_grain         = "PT1M"
        statistic          = "Average"
        time_window        = "PT5M"
        time_aggregation   = "Average"
        operator           = "GreaterThan"
        threshold          = 75
        metric_namespace   = "microsoft.compute/virtualmachinescalesets"
        dimensions {
          name     = "AppName"
          operator = "Equals"
          values   = ["App1"]
        }
      }

      scale_action {
        direction = "Increase"
        type      = "ChangeCount"
        value     = "1"
        cooldown  = "PT1M"
      }
    }

    rule {
      metric_trigger {
        metric_name        = "Percentage CPU"
        metric_resource_id = azurerm_linux_virtual_machine_scale_set.example.id
        time_grain         = "PT1M"
        statistic          = "Average"
        time_window        = "PT5M"
        time_aggregation   = "Average"
        operator           = "LessThan"
        threshold          = 25
      }

      scale_action {
        direction = "Decrease"
        type      = "ChangeCount"
        value     = "1"
        cooldown  = "PT1M"
      }
    }
  }

  predictive {
    scale_mode      = "Enabled"
    look_ahead_time = "PT5M"
  }
}
```

--------------------------------

### List Scheduled Query Rules Alerts

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/list-resources/monitor_scheduled_query_rules_alert

Examples for listing all alerts in a subscription or filtering by a specific resource group.

```hcl
list "azurerm_monitor_scheduled_query_rules_alert" "example" {
  provider = azurerm
  config {}
}
```

```hcl
list "azurerm_monitor_scheduled_query_rules_alert" "example" {
  provider = azurerm
  config {
    resource_group_name = "example-rg"
  }
}
```

--------------------------------

### Retrieve App Service Source Control Token

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/source_control_token

Example of querying a GitHub source control token and outputting its ID.

```hcl
data "azurerm_source_control_token" "example" {
  type = "GitHub"
}

output "id" {
  value = data.azurerm_app_service_github_token.example.id
}
```

--------------------------------

### Create a Security Center Assessment

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/security_center_assessment

Example demonstrating the configuration of a resource group, virtual network, scale set, assessment policy, and the security assessment itself.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_virtual_network" "example" {
  name                = "example-network"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  address_space       = ["10.0.0.0/16"]
}

resource "azurerm_subnet" "internal" {
  name                 = "internal"
  resource_group_name  = azurerm_resource_group.example.name
  virtual_network_name = azurerm_virtual_network.example.name
  address_prefixes     = ["10.0.2.0/24"]
}

resource "azurerm_linux_virtual_machine_scale_set" "example" {
  name                = "example-vmss"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  sku                 = "Standard_F2"
  instances           = 1
  admin_username      = "adminuser"

  admin_ssh_key {
    username   = "adminuser"
    public_key = file("~/.ssh/id_rsa.pub")
  }

  source_image_reference {
    publisher = "Canonical"
    offer     = "0001-com-ubuntu-server-jammy"
    sku       = "22_04-lts"
    version   = "latest"
  }

  os_disk {
    storage_account_type = "Standard_LRS"
    caching              = "ReadWrite"
  }

  network_interface {
    name    = "example"
    primary = true

    ip_configuration {
      name      = "internal"
      primary   = true
      subnet_id = azurerm_subnet.internal.id
    }
  }
}

resource "azurerm_security_center_assessment_policy" "example" {
  display_name = "Test Display Name"
  severity     = "Medium"
  description  = "Test Description"
}

resource "azurerm_security_center_assessment" "example" {
  assessment_policy_id = azurerm_security_center_assessment_policy.example.id
  target_resource_id   = azurerm_linux_virtual_machine_scale_set.example.id

  status {
    code = "Healthy"
  }
}
```

--------------------------------

### Basic HTTP Action Configuration

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/logic_app_action_http

Defines a resource group, a Logic App workflow, and an HTTP action that performs a GET request to a specified URI.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "workflow-resources"
  location = "West Europe"
}

resource "azurerm_logic_app_workflow" "example" {
  name                = "workflow1"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
}

resource "azurerm_logic_app_action_http" "example" {
  name         = "webhook"
  logic_app_id = azurerm_logic_app_workflow.example.id
  method       = "GET"
  uri          = "http://example.com/some-webhook"
}
```

--------------------------------

### Create a Monitor Smart Detector Alert Rule

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_smart_detector_alert_rule

Example configuration for defining a Smart Detector Alert Rule along with its required dependencies like resource group, application insights, and action group.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_application_insights" "example" {
  name                = "example-appinsights"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  application_type    = "web"
}

resource "azurerm_monitor_action_group" "example" {
  name                = "example-action-group"
  resource_group_name = azurerm_resource_group.example.name
  short_name          = "example"
}

resource "azurerm_monitor_smart_detector_alert_rule" "example" {
  name                = "example-smart-detector-alert-rule"
  resource_group_name = azurerm_resource_group.example.name
  severity            = "Sev0"
  scope_resource_ids  = [azurerm_application_insights.example.id]
  frequency           = "PT1M"
  detector_type       = "FailureAnomaliesDetector"

  action_group {
    ids = [azurerm_monitor_action_group.example.id]
  }
}
```

--------------------------------

### Original Terraform Configuration

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/migrating-from-deprecated-resources

Example configuration using the deprecated azurerm_app_service and azurerm_app_service_plan resources.

```hcl
resource "azurerm_resource_group" "example" {
  # ...
}

resource "azurerm_app_service_plan" "example" {
  name                = "Example App Service Plan"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name
  kind                = "Linux"
  reserved            = true

  sku {
    tier = "Standard"
    size = "S1"
  }
}

resource "azurerm_app_service" "example" {
  name                = "Example App Service"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name
  app_service_plan_id = azurerm_app_service_plan.main.id

  site_config {
    dotnet_framework_version = "v4.0"
    remote_debugging_enabled = true
    remote_debugging_version = "VS2022"
  }
}
```

--------------------------------

### Define Identity and Metadata

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_data_collection_rule

Example of configuring user-assigned identity, description, tags, and dependencies for the rule.

```hcl
identity {
    type         = "UserAssigned"
    identity_ids = [azurerm_user_assigned_identity.example.id]
  }

  description = "data collection rule example"
  tags = {
    foo = "bar"
  }
  depends_on = [
    azurerm_log_analytics_solution.example
  ]
```

--------------------------------

### Define Stream Declarations

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_data_collection_rule

Example of defining a custom stream with specific columns and data types.

```hcl
stream_declaration {
    stream_name = "Custom-MyTableRawData"
    column {
      name = "Time"
      type = "datetime"
    }
    column {
      name = "Computer"
      type = "string"
    }
    column {
      name = "AdditionalContext"
      type = "string"
    }
  }
```

--------------------------------

### Configure Azure Cloud

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/azure_cli

Set the Azure cloud environment for China or Government clouds before logging in.

```bash
az cloud set --name AzureChinaCloud|AzureUSGovernment
```

--------------------------------

### Associate to a Data Collection Endpoint

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_data_collection_rule_association

Example of associating a Linux virtual machine with a Data Collection Endpoint.

```hcl
resource "azurerm_monitor_data_collection_rule_association" "example2" {
  target_resource_id          = azurerm_linux_virtual_machine.example.id
  data_collection_endpoint_id = azurerm_monitor_data_collection_endpoint.example.id
  description                 = "example"
}
```

--------------------------------

### List VM Sizes

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_secret

Verifies authentication by listing available VM sizes in a specific region.

```bash
az vm list-sizes --location westus
```

--------------------------------

### Associate to a Data Collection Rule

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_data_collection_rule_association

Example of associating a Linux virtual machine with a Data Collection Rule.

```hcl
resource "azurerm_monitor_data_collection_rule_association" "example1" {
  name                    = "example1-dcra"
  target_resource_id      = azurerm_linux_virtual_machine.example.id
  data_collection_rule_id = azurerm_monitor_data_collection_rule.example.id
  description             = "example"
}
```

--------------------------------

### Create a Static Web App

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/static_web_app

Basic configuration for deploying a Static Web App within a resource group.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_static_web_app" "example" {
  name                = "example"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
}
```

--------------------------------

### Configure Resource Provider Registration

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/4.0-upgrade-guide

Examples of using the resource_provider_registrations and resource_providers_to_register flags to control automatic registration.

```hcl
provider "azurerm" {
  resource_provider_registrations = "core"
}
```

```hcl
provider "azurerm" {
  resource_provider_registrations = "core"

  resource_providers_to_register = [
    "Microsoft.ContainerService",
    "Microsoft.KeyVault",
  ]
}
```

```hcl
provider "azurerm" {
  resource_provider_registrations = "none"

  resource_providers_to_register = [
    "Microsoft.ApiManagement",
    "Microsoft.Compute",
    "Microsoft.KeyVault",
    "Microsoft.Network",
    "Microsoft.Storage",
  ]
}
```

--------------------------------

### Create a Windows Web App

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/windows_web_app

Basic configuration for deploying a Windows Web App, including the required resource group and service plan dependencies.

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_service_plan" "example" {
  name                = "example"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  sku_name            = "P1v2"
  os_type             = "Windows"
}

resource "azurerm_windows_web_app" "example" {
  name                = "example"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_service_plan.example.location
  service_plan_id     = azurerm_service_plan.example.id

  site_config {}
}
```

--------------------------------

### List Monitor Metric Alerts

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/list-resources/monitor_metric_alert

Examples for listing all alerts in a subscription or filtering by a specific resource group.

```hcl
list "azurerm_monitor_metric_alert" "example" {
  provider = azurerm
  config {}
}
```

```hcl
list "azurerm_monitor_metric_alert" "example" {
  provider = azurerm
  config {
    resource_group_name = "example-rg"
  }
}
```

--------------------------------

### Configure System Assigned Identity

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/3.0-upgrade-guide

Example of defining a system-assigned identity block within an Azure resource configuration.

```hcl
identity {
    type = "SystemAssigned"
  }
}
```

--------------------------------

### Configure Azure Provider and Create Resources

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/index

Initializes the Azure provider and defines a resource group and virtual network. Ensure the provider version is specified as shown.

```hcl
terraform {
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "=5.0.0"
    }
  }
}

# Configure the Microsoft Azure Provider
provider "azurerm" {
  features {}
}

# Create a resource group
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

# Create a virtual network within the resource group
resource "azurerm_virtual_network" "example" {
  name                = "example-network"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  address_space       = ["10.0.0.0/16"]
}
```

--------------------------------

### Assigning a Role to a Managed Identity

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/managed_service_identity

Example of assigning a Contributor role to a virtual machine's system-assigned identity.

```hcl
  identity {
    type = "SystemAssigned"
  }
}

data "azurerm_role_definition" "contributor" {
  name = "Contributor"
}

resource "azurerm_role_assignment" "example" {
  scope              = data.azurerm_subscription.current.id
  role_definition_id = "${data.azurerm_subscription.current.id}${data.azurerm_role_definition.contributor.id}"
  principal_id       = azurerm_virtual_machine.example.identity[0].principal_id
}
```

--------------------------------

### Generate a PKCS#12 Bundle

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_certificate

Packages the private key and certificate into a .pfx file required for AzureRM provider authentication.

```bash
# note: the password is intentionally quoted for shell compatibility, the value does not include the quotes
$ openssl pkcs12 -export -password pass:"Pa55w0rd123" -out client.pfx -inkey client.key -in client.crt
```

--------------------------------

### Create a Windows Function App

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/windows_function_app

Basic configuration for deploying a Windows Function App, including the necessary resource group, storage account, and service plan dependencies.

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_storage_account" "example" {
  name                     = "windowsfunctionappsa"
  resource_group_name      = azurerm_resource_group.example.name
  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "LRS"
}

resource "azurerm_service_plan" "example" {
  name                = "example-app-service-plan"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  os_type             = "Windows"
  sku_name            = "Y1"
}

resource "azurerm_windows_function_app" "example" {
  name                = "example-windows-function-app"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location

  storage_account_name       = azurerm_storage_account.example.name
  storage_account_access_key = azurerm_storage_account.example.primary_access_key
  service_plan_id            = azurerm_service_plan.example.id

  site_config {}
}
```

--------------------------------

### Provision an App Service Certificate from a Local File

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/app_service_certificate

Creates an App Service certificate using a local PFX file. Ensure the resource group matches the one where the App Service plan is defined.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_app_service_certificate" "example" {
  name                = "example-cert"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  pfx_blob            = filebase64("certificate.pfx")
  password            = "terraform"
}
```

--------------------------------

### Verifying Configuration with Terraform Plan

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/migrating-from-deprecated-resources

Run terraform plan to verify that the imported resources match the current configuration and no changes are required.

```bash
$ terraform plan
Refreshing Terraform state in-memory prior to plan...
The refreshed state will be used to calculate this plan, but will not be
persisted to local or remote state storage.


------------------------------------------------------------------------

No changes. Infrastructure is up-to-date.

This means that Terraform did not detect any differences between your
configuration and real physical resources that exist. As a result, no
actions need to be performed.
```

--------------------------------

### List User Assigned Identities

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/list-resources/user_assigned_identity

Examples for retrieving User Assigned Identities at the subscription level or filtered by a specific resource group.

```hcl
list "azurerm_user_assigned_identity" "example" {
  provider = azurerm
  config {}
}
```

```hcl
list "azurerm_user_assigned_identity" "example" {
  provider = azurerm
  config {
    resource_group_name = "example-rg"
  }
}
```

--------------------------------

### Create an Azure Service Plan

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/service_plan

Basic configuration for deploying a Linux-based App Service Plan within a resource group.

```hcl
provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_service_plan" "example" {
  name                = "example"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  os_type             = "Linux"
  sku_name            = "P1v2"
}
```

--------------------------------

### List Activity Log Alerts

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/list-resources/monitor_activity_log_alert

Examples for listing Activity Log Alerts at the subscription level or filtered by a specific resource group.

```hcl
list "azurerm_monitor_activity_log_alert" "example" {
  provider = azurerm
  config {}
}
```

```hcl
list "azurerm_monitor_activity_log_alert" "example" {
  provider = azurerm
  config {
    resource_group_name = "example-rg"
  }
}
```

--------------------------------

### Provider Configuration with Client Certificate Path

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_certificate

Configuring the provider to read the certificate bundle from a filesystem path.

```hcl
variable "client_certificate" {}
variable "client_certificate_password" {}

# We strongly recommend using the required_providers block to set the
# Azure Provider source and version being used
terraform {
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "=5.0.0"
    }
  }
}

# Configure the Microsoft Azure Provider
provider "azurerm" {
  features {}

  client_id                   = "00000000-0000-0000-0000-000000000000"
  client_certificate_path     = var.client_certificate_path
  client_certificate_password = var.client_certificate_password
  tenant_id                   = "10000000-0000-0000-0000-000000000000"
  subscription_id             = "20000000-0000-0000-0000-000000000000"
}
```

--------------------------------

### Import azurerm_windows_web_app

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/windows_web_app

Instructions for importing an existing Windows Web App into Terraform state.

```APIDOC
## Import

Windows Web Apps can be imported using the `resource id`:

```bash
terraform import azurerm_windows_web_app.example /subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/resGroup1/providers/Microsoft.Web/sites/site1
```
```

--------------------------------

### Define a Scheduled Query Rule Alert

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_scheduled_query_rules_alert

Example configuration for a scheduled query rule that monitors log resources for specific error codes.

```hcl
  # Count requests in multiple log resources and group into 5-minute bins by HTTP operation
  query = format(<<-QUERY
  let a=requests
    | where toint(resultCode) >= 500
    | extend fail=1; let b=app('%s').requests
    | where toint(resultCode) >= 500 | extend fail=1; a
    | join b on fail
QUERY
  , azurerm_application_insights.example2.id)
  severity    = 1
  frequency   = 5
  time_window = 30
  trigger {
    operator  = "GreaterThan"
    threshold = 3
  }
  tags = {
    foo = "bar"
  }
}
```

--------------------------------

### Importing a Logic App HTTP Action

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/logic_app_action_http

Demonstrates how to import an existing Logic App HTTP Action into Terraform state using the resource ID.

```bash
terraform import azurerm_logic_app_action_http.webhook1 /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.Logic/workflows/workflow1/actions/webhook1
```

--------------------------------

### Configure Data Collection Rule Association Infrastructure

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_data_collection_rule_association

Sets up a complete environment including a Linux virtual machine and a monitor data collection rule to be associated.

```hcl
resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_virtual_network" "example" {
  name                = "virtualnetwork"
  address_space       = ["10.0.0.0/16"]
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
}

resource "azurerm_subnet" "example" {
  name                 = "subnet"
  resource_group_name  = azurerm_resource_group.example.name
  virtual_network_name = azurerm_virtual_network.example.name
  address_prefixes     = ["10.0.2.0/24"]
}

resource "azurerm_network_interface" "example" {
  name                = "nic"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name

  ip_configuration {
    name                          = "internal"
    subnet_id                     = azurerm_subnet.example.id
    private_ip_address_allocation = "Dynamic"
  }
}

resource "azurerm_linux_virtual_machine" "example" {
  name                = "machine"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  size                = "Standard_B1ls"
  admin_username      = "adminuser"
  network_interface_ids = [
    azurerm_network_interface.example.id,
  ]

  admin_password = "example-Password@7890"

  disable_password_authentication = false

  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }

  source_image_reference {
    publisher = "Canonical"
    offer     = "0001-com-ubuntu-server-jammy"
    sku       = "22_04-lts"
    version   = "latest"
  }
}

resource "azurerm_monitor_data_collection_rule" "example" {
  name                = "example-dcr"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  destinations {
    azure_monitor_metrics {
      name = "example-destination-metrics"
    }
  }
  data_flow {
    streams      = ["Microsoft-InsightsMetrics"]
    destinations = ["example-destination-metrics"]
  }
}

resource "azurerm_monitor_data_collection_endpoint" "example" {
  name                = "example-dce"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
}
```

--------------------------------

### Configure Environment Variables for Filesystem Certificate

Source: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_certificate

Set environment variables to authenticate using a local .pfx certificate file.

```sh
# sh
$ export ARM_CLIENT_ID="00000000-0000-0000-0000-000000000000"
$ export ARM_CLIENT_CERTIFICATE_PATH="/path/to/my/client/certificate.pfx"
$ export ARM_CLIENT_CERTIFICATE_PASSWORD="Pa55w0rd123"
$ export ARM_TENANT_ID="10000000-0000-0000-0000-000000000000"
$ export ARM_SUBSCRIPTION_ID="20000000-0000-0000-0000-000000000000"
```

```PowerShell
# PowerShell
> $env:ARM_CLIENT_ID = "00000000-0000-0000-0000-000000000000"
> $env:ARM_CLIENT_CERTIFICATE_PATH = "C:\Users\myusername\Documents\my\client\certificate.pfx"
> $env:ARM_CLIENT_CERTIFICATE_PASSWORD = "Pa55w0rd123"
> $env:ARM_TENANT_ID = "10000000-0000-0000-0000-000000000000"
> $env:ARM_SUBSCRIPTION_ID = "20000000-0000-0000-0000-000000000000"
```
Tokens:
Raw