A Terraform modules composition (feature) which includes services needed for Claranet RUN/MSP.

It includes:

• Log Management with following resources
  • Log Analytics Workspace
  • Storage Account with SAS Token to upload logs to
• Key Vault
• FAME monitoring function for additional metrics. Built-in metrics sent:
  • fame.azure.application_gateway.instances: number of Application Gateway instances
  • fame.azure.backup.file_share: number of successful file share backups
  • fame.azure.backup.vm: number of successful virtual machines backups
  • fame.azure.virtual_network_gateway.ike_event_success: number of successful ike events for a VPN Gateway

• PowerShell with Az module >= 3.6 is mandatory and is used to configure IIS logs collect in Azure Monitor

The integrated services can be used separately with the same inputs and outputs when it's a sub module.

See logs sub-module README.

See monitoring_function README

See Key Vault module: terraform-azurerm-keyvault.

This module is optimized to work with the Claranet terraform-wrapper tool which set some terraform variables in the environment needed by this module. More details about variables set by the terraform-wrapper available in the documentation.

module "azure_region" {
  source  = "claranet/regions/azurerm"
  version = "x.x.x"

  azure_region = var.azure_region
}

module "rg" {
  source  = "claranet/rg/azurerm"
  version = "x.x.x"

  location    = module.azure_region.location
  client_name = var.client_name
  environment = var.environment
  stack       = var.stack
}

module "global_run" {
  source  = "claranet/run-common/azurerm"
  version = "x.x.x"

  client_name    = var.client_name
  location       = module.azure_region.location
  location_short = module.azure_region.location_short
  environment    = var.environment
  stack          = var.stack

  resource_group_name = module.rg.resource_group_name

  monitoring_function_splunk_token = "xxxxxx"
  monitoring_function_metrics_extra_dimensions = {
    env           = var.environment
    sfx_monitored = "true"
  }

  extra_tags = {
    foo = "bar"
  }
}

object({
    bypass                     = optional(string, "None"),
    default_action             = optional(string, "Deny"),
    ip_rules                   = optional(list(string)),
    virtual_network_subnet_ids = optional(list(string)),
  })

Microsoft Azure Monitor logs documentation: docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overview

Microsoft Azure Key Vault documentation: docs.microsoft.com/en-us/azure/key-vault/