Skip to content

volocloud_tenancy_account_azure

Tenancy Account resource configuration main schema.

Example Usage

# Example using Azure Existing Billing account of type MPA
resource "volocloud_tenancy_account_azure" "example" {
  configuration = {
    abbreviation = "expl"
    billing = {
      account_type             = "mpa"
      existing_subscription_id = var.azure_subscriptions.app1_subscription_id
    }
    keyvault = {
      soft_delete_retention_days = 7
    }
    regions = {
      home = {
        primary = {
          location = "australiaeast"
          network = {
            enabled = true
          }
          region = "auee"
        }
      }
    }
    resource_groups_lock = {
      baseline = false
      rsv      = false
    }
    vnet_template = {
      standard = {
        enabled = true
        iaas_subnets = {
          data_tier = {
            delegation = {
              actions = [
                "Microsoft.Network/virtualNetworks/subnets/join/action",
              ]
              name    = "psqlfs"
              service = "Microsoft.DBforPostgreSQL/flexibleServers"
            }
            service_endpoints = [
              "Microsoft.KeyVault",
              "Microsoft.Storage",
            ]
          }
        }
        paas_subnets = {
          web_tier = {
            agw = {
              enabled = true
              service_endpoints = [
                "Microsoft.KeyVault",
              ]
            }
          }
        }
        vnet_link_to_private_dns_zones = [
          "privatelink.postgres.database.azure.com",
        ]
      }
    }
    tags = {
      key1 = "value1"
    }
  }
  environment     = "dev"
  name            = "example"
  volo_tenancy_id = "00000000-0000-0000-0000-000000000000"
}

Schema

Required

  • account_id (String) Volocloud Account ID associated with this tenancy_account.
  • configuration (Attributes) Provides configuration required to setup the tenancy_account. (see below for nested schema)
  • environment (String) Environment for the tenancy_account. MUST be one of dev, test, qa or prod.
  • name (String) Volocloud tenancy_account Name.
  • tenancy_id (String) Volocloud Tenancy ID.

Optional

  • trigger_update (String) This attribute provides a mechanism to trigger an update on the tenancy_account resouce when there is no change to the other attributes.

Read-Only

  • id (String) ID of the resource computed from the account_id, tenancy_id and tenancy_account_id separated by : .
  • resources (Map of String) These are all the resources created in the tenancy_account.
  • tenancy_account_id (String) Volocloud Tenancy Account ID.

Nested Schema for configuration

Required:

  • abbreviation (String) This abbreviation will be used to uniquily identify resources created. Only applies to resources that require Azure global uniqueness.
  • billing (Attributes) Provides Azure billing details to use for this subscription. (see below for nested schema)
  • regions (Attributes) Defines which regions to deploy into. (see below for nested schema)
  • vnet_template (Attributes) Network template for configuring subnets inside VNET. Exactly one of nc2 or standard MUST be provided. (see below for nested schema)

Optional:

  • backups (Attributes) Configuration settings for backups in this subscription. Defaults to {"recovery_services_vault":{"backup_policies":{"file_share":[{"frequency":{"daily":{"time":"23:00"},"hourly":},"name":"daily","retention":{"daily":{"count":33},"monthly":,"weekly":,"yearly":},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":},"name":"monthly","retention":{"daily":{"count":33},"monthly":{"count":13,"days":,"include_last_days":,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":},"name":"weekly","retention":{"daily":{"count":33},"monthly":,"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":},"name":"yearly","retention":{"daily":{"count":33},"monthly":{"count":13,"days":,"include_last_days":,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":{"count":7,"days":,"include_last_days":,"months":["January"],"weekdays":["Monday"],"weeks":["First"]}},"timezone":"UTC"}],"vm":[{"frequency":{"daily":{"time":"23:00"},"hourly":,"weekly":},"name":"daily","policy_type":{"v1":,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":,"weekly":,"yearly":},"tiering_policy":,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":,"weekly":},"name":"monthly","policy_type":{"v1":,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":{"count":13,"days":,"include_last_days":,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":},"tiering_policy":,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":,"weekly":},"name":"weekly","policy_type":{"v1":,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":,"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":},"tiering_policy":,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":,"weekly":},"name":"yearly","policy_type":{"v1":,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":{"count":13,"days":,"include_last_days":,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":{"count":7,"days":,"include_last_days":,"months":["January"],"weekdays":["Monday"],"weeks":["First"]}},"tiering_policy":,"timezone":"UTC"}]},"encryption":{"enabled":true,"infrastructure_encryption":false},"immutability":,"monitoring":{"alerts_for_all_job_failures":true},"sku":"Standard","soft_delete":true,"storage_mode_type":"GeoRedundant","tags":}} (see below for nested schema)
  • budgets (Attributes List) Provides a list of budget objects. (see below for nested schema)
  • keyvault (Attributes) Azure KeyVault configuration details. (see below for nested schema)
  • log_analytics_workspace (Attributes) Log Analytics Workspace configuration. (see below for nested schema)
  • resource_groups_lock (Attributes) Configures Azure Delete Lock at Resource Groups level. (see below for nested schema)
  • tags (Map of String) Key-value map of resource tags for all the tenancy resources.

Nested Schema for configuration.billing

Required:

  • account_type (String) Microsoft Azure Billing Account type. Possible values are ea, mca or mpa.

Optional:

  • account_id (String) Microsoft Customer Agreement billing invoice id or Microsoft Enterprise Agreement billing enrollment id.
  • existing_subscription_id (String) Existing subscription id to be used.
  • workload (String) Provides the workload to use when creating subscription under MCA or EA. It defaults to Production.

Nested Schema for configuration.regions

Required:

Optional:

  • other (Attributes List) A list of Non-Home geographies containing a pair of primary/secondary regions in each geography. (see below for nested schema)

Nested Schema for configuration.regions.home

Required:

Optional:

Nested Schema for configuration.regions.home.primary

Required:

  • location (String) The Azure location of the region. Possible values are [australiacentral australiacentral2 australiaeast australiasoutheast austriaeast brazilsouth brazilsoutheast canadacentral canadaeast centralindia centralus chilecentral chinaeast chinaeast2 chinanorth chinanorth2 eastasia eastus eastus2 francecentral francesouth germanynorth germanywestcentral indonesiacentral israelcentral italynorth japaneast japanwest koreacentral koreasouth malaysiawest mexicocentral newzealandnorth northcentralus northeurope norwayeast norwaywest polandcentral qatarcentral southafricanorth southafricawest southcentralus southeastasia southindia spaincentral swedencentral switzerlandnorth switzerlandwest uaecentral uaenorth uksouth ukwest usdodcentral usdodeast usgovarizona usgovtexas usgovvirginia westcentralus westeurope westindia westus westus2 westus3].
  • network (Attributes) This information is used to deploy a network in this tenancy account associated with the landing zone. (see below for nested schema)
  • region (String) The Azure region code of the location. Possible values are [aecc aenn apee apse atee auc2 aucc auee ause brse brss cacc caee chnn chww clee cne2 cnee cnn2 cnnn decw denn escc eunn euww frcc frss gbss gbww idcc ilcc incc inss inww itnn jpee jpww krcc krss mxcc myww noee noww nznn plcc qacc secc uscc uscn uscs uscw usdc usde use2 usee usgc usge usgw usw2 usw3 usww zann zaww].

Nested Schema for configuration.regions.home.primary.network

Required:

  • enabled (Boolean) If enabled, it will deploy a network in this tenancy account associated with the landing zone.

Optional:

  • ip_address_mask (Number) The base IP Network Mask for this tenancy account (e.g. 24). If provided, it MUST be between 22 and 26. CANNOT be changed after creation without destroying everything running on top of the network. Defaults to 24.

Nested Schema for configuration.regions.home.secondary

Required:

  • location (String) The Azure location of the region. Possible values are [australiacentral australiacentral2 australiaeast australiasoutheast austriaeast brazilsouth brazilsoutheast canadacentral canadaeast centralindia centralus chilecentral chinaeast chinaeast2 chinanorth chinanorth2 eastasia eastus eastus2 francecentral francesouth germanynorth germanywestcentral indonesiacentral israelcentral italynorth japaneast japanwest koreacentral koreasouth malaysiawest mexicocentral newzealandnorth northcentralus northeurope norwayeast norwaywest polandcentral qatarcentral southafricanorth southafricawest southcentralus southeastasia southindia spaincentral swedencentral switzerlandnorth switzerlandwest uaecentral uaenorth uksouth ukwest usdodcentral usdodeast usgovarizona usgovtexas usgovvirginia westcentralus westeurope westindia westus westus2 westus3].
  • network (Attributes) This information is used to deploy a network in this tenancy account associated with the landing zone. (see below for nested schema)
  • region (String) The Azure region code of the location. Possible values are [aecc aenn apee apse atee auc2 aucc auee ause brse brss cacc caee chnn chww clee cne2 cnee cnn2 cnnn decw denn escc eunn euww frcc frss gbss gbww idcc ilcc incc inss inww itnn jpee jpww krcc krss mxcc myww noee noww nznn plcc qacc secc uscc uscn uscs uscw usdc usde use2 usee usgc usge usgw usw2 usw3 usww zann zaww].

Nested Schema for configuration.regions.home.secondary.network

Required:

  • enabled (Boolean) If enabled, it will deploy a network in this tenancy account associated with the landing zone.

Optional:

  • ip_address_mask (Number) The base IP Network Mask for this tenancy account (e.g. 24). If provided, it MUST be between 22 and 26. CANNOT be changed after creation without destroying everything running on top of the network. Defaults to 24.

Nested Schema for configuration.regions.other

Required:

Optional:

Nested Schema for configuration.regions.other.primary

Required:

  • location (String) The Azure location of the region. Possible values are [australiacentral australiacentral2 australiaeast australiasoutheast austriaeast brazilsouth brazilsoutheast canadacentral canadaeast centralindia centralus chilecentral chinaeast chinaeast2 chinanorth chinanorth2 eastasia eastus eastus2 francecentral francesouth germanynorth germanywestcentral indonesiacentral israelcentral italynorth japaneast japanwest koreacentral koreasouth malaysiawest mexicocentral newzealandnorth northcentralus northeurope norwayeast norwaywest polandcentral qatarcentral southafricanorth southafricawest southcentralus southeastasia southindia spaincentral swedencentral switzerlandnorth switzerlandwest uaecentral uaenorth uksouth ukwest usdodcentral usdodeast usgovarizona usgovtexas usgovvirginia westcentralus westeurope westindia westus westus2 westus3].
  • network (Attributes) This information is used to deploy a network in this tenancy account associated with the landing zone. (see below for nested schema)
  • region (String) The Azure region code of the location. Possible values are [aecc aenn apee apse atee auc2 aucc auee ause brse brss cacc caee chnn chww clee cne2 cnee cnn2 cnnn decw denn escc eunn euww frcc frss gbss gbww idcc ilcc incc inss inww itnn jpee jpww krcc krss mxcc myww noee noww nznn plcc qacc secc uscc uscn uscs uscw usdc usde use2 usee usgc usge usgw usw2 usw3 usww zann zaww].

Nested Schema for configuration.regions.other.primary.network

Required:

  • enabled (Boolean) If enabled, it will deploy a network in this tenancy account associated with the landing zone.

Optional:

  • ip_address_mask (Number) The base IP Network Mask for this tenancy account (e.g. 24). If provided, it MUST be between 22 and 26. CANNOT be changed after creation without destroying everything running on top of the network. Defaults to 24.

Nested Schema for configuration.regions.other.secondary

Required:

  • location (String) The Azure location of the region. Possible values are [australiacentral australiacentral2 australiaeast australiasoutheast austriaeast brazilsouth brazilsoutheast canadacentral canadaeast centralindia centralus chilecentral chinaeast chinaeast2 chinanorth chinanorth2 eastasia eastus eastus2 francecentral francesouth germanynorth germanywestcentral indonesiacentral israelcentral italynorth japaneast japanwest koreacentral koreasouth malaysiawest mexicocentral newzealandnorth northcentralus northeurope norwayeast norwaywest polandcentral qatarcentral southafricanorth southafricawest southcentralus southeastasia southindia spaincentral swedencentral switzerlandnorth switzerlandwest uaecentral uaenorth uksouth ukwest usdodcentral usdodeast usgovarizona usgovtexas usgovvirginia westcentralus westeurope westindia westus westus2 westus3].
  • network (Attributes) This information is used to deploy a network in this tenancy account associated with the landing zone. (see below for nested schema)
  • region (String) The Azure region code of the location. Possible values are [aecc aenn apee apse atee auc2 aucc auee ause brse brss cacc caee chnn chww clee cne2 cnee cnn2 cnnn decw denn escc eunn euww frcc frss gbss gbww idcc ilcc incc inss inww itnn jpee jpww krcc krss mxcc myww noee noww nznn plcc qacc secc uscc uscn uscs uscw usdc usde use2 usee usgc usge usgw usw2 usw3 usww zann zaww].

Nested Schema for configuration.regions.other.secondary.network

Required:

  • enabled (Boolean) If enabled, it will deploy a network in this tenancy account associated with the landing zone.

Optional:

  • ip_address_mask (Number) The base IP Network Mask for this tenancy account (e.g. 24). If provided, it MUST be between 22 and 26. CANNOT be changed after creation without destroying everything running on top of the network. Defaults to 24.

Nested Schema for configuration.vnet_template

Optional:

  • avd (Attributes) Settings for deploying subnets required for Azure Virtual Desktop template. (see below for nested schema)
  • custom (Attributes) Settings for deploying fully customized subnets inside the VNET for the region. (see below for nested schema)
  • nc2 (Attributes) Settings for deploying subnets required for Nutanix NC2 template. (see below for nested schema)
  • standard (Attributes) Settings for deploying subnets required for standard template. (see below for nested schema)

Nested Schema for configuration.vnet_template.avd

Required:

  • enabled (Boolean) If enabled, it will deploy the Azure Virtual Desktop network template.

Nested Schema for configuration.vnet_template.custom

Required:

  • enabled (Boolean) If enabled, it will allow customizations of IaaS and PaaS subnets inside the VNET. This is advanced use case and requires the user to provide valid netmasks included in the ip_address_mask provided for the region. This resource doesn't do any IPAM or validation if there is space for the subnets.

Optional:

  • iaas_subnets (Attributes) Configure IaaS subnets. (see below for nested schema)
  • paas_subnets (Attributes) Configure PaaS subnets. (see below for nested schema)
  • vnet_link_to_private_dns_zones (List of String) Provides a list of Azure Private DNS Zones to link to this VNET. The zones must be zones created by the volocloud provider: either PaaS private zones or custom private zones.

Nested Schema for configuration.vnet_template.custom.iaas_subnets

Optional:

Nested Schema for configuration.vnet_template.custom.iaas_subnets.app_tier

Required:

  • ip_address_netnum (Number) Netnum is a whole number that represent the order of the resulting subnet after increasing the bits with newbits. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26. There are 4 x /26 possible resulting subnets and netnum can choose which one by provinding 0, 1, 2 or 3.
  • ip_address_newbits (Number) Newbits is the number of additional bits with which to extend the Region's ip_address_mask. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26.

Optional:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.custom.iaas_subnets.app_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.custom.iaas_subnets.data_tier

Required:

  • ip_address_netnum (Number) Netnum is a whole number that represent the order of the resulting subnet after increasing the bits with newbits. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26. There are 4 x /26 possible resulting subnets and netnum can choose which one by provinding 0, 1, 2 or 3.
  • ip_address_newbits (Number) Newbits is the number of additional bits with which to extend the Region's ip_address_mask. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26.

Optional:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.custom.iaas_subnets.data_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.custom.iaas_subnets.web_tier

Required:

  • ip_address_netnum (Number) Netnum is a whole number that represent the order of the resulting subnet after increasing the bits with newbits. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26. There are 4 x /26 possible resulting subnets and netnum can choose which one by provinding 0, 1, 2 or 3.
  • ip_address_newbits (Number) Newbits is the number of additional bits with which to extend the Region's ip_address_mask. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26.

Optional:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.custom.iaas_subnets.web_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.custom.paas_subnets

Optional:

  • app_tier (Attributes Map) Enables PaaS subnets for app tier services. The map keys CAN be on of: aci, etc. (see below for nested schema)
  • data_tier (Attributes Map) Enables 1 PaaS subnet for data tier services. The map keys CAN be on of: pgsql and sqlmi. (see below for nested schema)
  • web_tier (Attributes Map) Enables 1 PaaS subnet for web tier (internet facing) services. The map keys CAN be on of: agw. (see below for nested schema)

Nested Schema for configuration.vnet_template.custom.paas_subnets.app_tier

Required:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • ip_address_netnum (Number) Netnum is a whole number that represent the order of the resulting subnet after increasing the bits with newbits. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26. There are 4 x /26 possible resulting subnets and netnum can choose which one by provinding 0, 1, 2 or 3.
  • ip_address_newbits (Number) Newbits is the number of additional bits with which to extend the Region's ip_address_mask. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26.

Optional:

  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.custom.paas_subnets.app_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.custom.paas_subnets.data_tier

Required:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • ip_address_netnum (Number) Netnum is a whole number that represent the order of the resulting subnet after increasing the bits with newbits. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26. There are 4 x /26 possible resulting subnets and netnum can choose which one by provinding 0, 1, 2 or 3.
  • ip_address_newbits (Number) Newbits is the number of additional bits with which to extend the Region's ip_address_mask. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26.

Optional:

  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.custom.paas_subnets.data_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.custom.paas_subnets.web_tier

Required:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • ip_address_netnum (Number) Netnum is a whole number that represent the order of the resulting subnet after increasing the bits with newbits. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26. There are 4 x /26 possible resulting subnets and netnum can choose which one by provinding 0, 1, 2 or 3.
  • ip_address_newbits (Number) Newbits is the number of additional bits with which to extend the Region's ip_address_mask. For example, if given a /24 and a newbits value of 2, the resulting subnet address will have length /26.

Optional:

  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.custom.paas_subnets.web_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.nc2

Required:

  • enabled (Boolean) If enabled, it will deploy the NC2 network template.

Nested Schema for configuration.vnet_template.standard

Required:

  • enabled (Boolean) If enabled, it will deploy the standard network template.

Optional:

  • iaas_subnets (Attributes) Configure standard IaaS subnets. (see below for nested schema)
  • paas_subnets (Attributes) Configure PaaS subnets. (see below for nested schema)
  • vnet_link_to_private_dns_zones (List of String) Provides a list of Azure Private DNS Zones to link to this VNET. The zones must be zones created by the volocloud provider: either PaaS private zones or custom private zones.

Nested Schema for configuration.vnet_template.standard.iaas_subnets

Optional:

Nested Schema for configuration.vnet_template.standard.iaas_subnets.app_tier

Optional:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.standard.iaas_subnets.app_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.standard.iaas_subnets.data_tier

Optional:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.standard.iaas_subnets.data_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.standard.iaas_subnets.web_tier

Optional:

  • delegation (Attributes) Provides details to deleted the subnet to a supported Azure service. (see below for nested schema)
  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.standard.iaas_subnets.web_tier.delegation

Required:

  • name (String) A name for this delegation.
  • service (String) The name of service to delegate to.

Optional:

  • actions (List of String) A list of Actions which should be delegated. This list is specific to the service to delegate to.

Nested Schema for configuration.vnet_template.standard.paas_subnets

Optional:

  • app_tier (Attributes Map) Enables up to 3 PaaS subnets for app tier services. The map keys CAN be on of: aci, etc. (see below for nested schema)
  • data_tier (Attributes Map) Enables 1 PaaS subnet for data tier services. The map keys CAN be on of: pgsql and sqlmi. (see below for nested schema)
  • web_tier (Attributes Map) Enables 1 PaaS subnet for web tier (internet facing) services. The map keys CAN be on of: agw. (see below for nested schema)

Nested Schema for configuration.vnet_template.standard.paas_subnets.app_tier

Required:

  • enabled (Boolean) If true, deploys a PaaS subnet in the VNET.

Optional:

  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.standard.paas_subnets.data_tier

Required:

  • enabled (Boolean) If true, deploys a PaaS subnet in the VNET.

Optional:

  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.vnet_template.standard.paas_subnets.web_tier

Required:

  • enabled (Boolean) If true, deploys a PaaS subnet in the VNET.

Optional:

  • service_endpoints (List of String) The list of Service endpoints to associate with the subnet.

Nested Schema for configuration.backups

Optional:

  • recovery_services_vault (Attributes) Configuration settings for Recovery Services Vault in this subscription. Defaults to {"backup_policies":{"file_share":[{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"daily","retention":{"daily":{"count":33},"monthly":<null>,"weekly":<null>,"yearly":<null>},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"monthly","retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":<null>},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"weekly","retention":{"daily":{"count":33},"monthly":<null>,"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":<null>},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"yearly","retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":{"count":7,"days":<null>,"include_last_days":<null>,"months":["January"],"weekdays":["Monday"],"weeks":["First"]}},"timezone":"UTC"}],"vm":[{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"daily","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":<null>,"weekly":<null>,"yearly":<null>},"tiering_policy":<null>,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"monthly","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":<null>},"tiering_policy":<null>,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"weekly","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":<null>,"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":<null>},"tiering_policy":<null>,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"yearly","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":{"count":7,"days":<null>,"include_last_days":<null>,"months":["January"],"weekdays":["Monday"],"weeks":["First"]}},"tiering_policy":<null>,"timezone":"UTC"}]},"encryption":{"enabled":true,"infrastructure_encryption":false},"immutability":<null>,"monitoring":{"alerts_for_all_job_failures":true},"sku":"Standard","soft_delete":true,"storage_mode_type":"GeoRedundant","tags":<null>}. (see below for nested schema)

Nested Schema for configuration.backups.recovery_services_vault

Optional:

  • backup_policies (Attributes) Backup policies to be created in this Recovery Services Vault. Defaults to {"file_share":[{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"daily","retention":{"daily":{"count":33},"monthly":<null>,"weekly":<null>,"yearly":<null>},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"monthly","retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":<null>},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"weekly","retention":{"daily":{"count":33},"monthly":<null>,"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":<null>},"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>},"name":"yearly","retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":13,"weekdays":["Saturday"]},"yearly":{"count":7,"days":<null>,"include_last_days":<null>,"months":["January"],"weekdays":["Monday"],"weeks":["First"]}},"timezone":"UTC"}],"vm":[{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"daily","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":<null>,"weekly":<null>,"yearly":<null>},"tiering_policy":<null>,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"monthly","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":<null>},"tiering_policy":<null>,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"weekly","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":<null>,"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":<null>},"tiering_policy":<null>,"timezone":"UTC"},{"frequency":{"daily":{"time":"23:00"},"hourly":<null>,"weekly":<null>},"name":"yearly","policy_type":{"v1":<null>,"v2":{"instant_restore_retention_days":7}},"retention":{"daily":{"count":33},"monthly":{"count":13,"days":<null>,"include_last_days":<null>,"weekdays":["Sunday"],"weeks":["Last"]},"weekly":{"count":5,"weekdays":["Saturday"]},"yearly":{"count":7,"days":<null>,"include_last_days":<null>,"months":["January"],"weekdays":["Monday"],"weeks":["First"]}},"tiering_policy":<null>,"timezone":"UTC"}]}. (see below for nested schema)
  • encryption (Attributes) Encryption configuration for the Recovery Services Vault. Defaults to `` (see below for nested schema)
  • immutability (String) Immutability settings of vault. Possible values are Locked, Unlocked or Disabled.

Warning

Once immutability is set to Locked, changing it to other values forces a new Recovery Services Vault to be created.

  • monitoring (Attributes) Monitoring configuration for the Recovery Services Vault. Defaults to `` (see below for nested schema)
  • sku (String) Sets the vault's SKU. Possible values are Standard or RS0. Defaults to Standard
  • soft_delete (Boolean) Is soft delete enable for this Vault? Defaults to true.
  • storage_mode_type (String) The storage type of the Recovery Services Vault. Possible values are GeoRedundant, LocallyRedundant or ZoneRedundant. Defaults to GeoRedundant.

Note

If storage_mode_type is GeoRedundant and there are multiple regions defined in this subscription, cross region restore will be enabled by default, otherwise it will be disabled. Once cross region restore is enabled, changing it back to false forces a new Recovery Service Vault to be created.


- tags (Map of String) Key-value map of resource tags.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies

Optional:

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share

Required:

  • name (String) Backup policy name MUST be lowercase alphanumeric and dash, between 1 and 80 characters.
  • retention (Attributes) Configures the policy retention. (see below for nested schema)

Optional:

  • frequency (Attributes) Sets the backup frequency. Exactly one of daily or hourly MUST be specified. (see below for nested schema)
  • timezone (String) Specifies the Time Zone which should be used by the host pool and its associated resources for time based events, the possible values are defined here. Defaults to UTC.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.retention

Optional:

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.retention.daily

Optional:

  • count (Number) The number of backups to keep. Must be between 1 and 200. Defaults to 33.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.retention.monthly

Optional:

  • count (Number) The number of backups to keep. Must be between 1 and 120. Defaults to 13.
  • days (Number) The days of the month to retain backups of. Must be between 1 and 31. If specified, include_last_days MUST be specified as well and conflicts with weekdays and weeks.
  • include_last_days (Boolean) Including the last day of the month. If specified, days MUST be specified as well and conflicts with weekdays and weeks.
  • weekdays (List of String) The weekday backups to retain. Possible values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday or Saturday. If specified, weeks MUST be specified as well and conflicts with days and include_last_days.
  • weeks (List of String) The weeks of the month to retain backups of. Possible values are First, Second, Third, Fourth or Last. If specified, weekdays MUST be specified as well and conflicts with days and include_last_days.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.retention.weekly

Optional:

  • count (Number) The number of backups to keep. Must be between 1 and 200. Defaults to 5.
  • weekdays (List of String) The weekday backups to retain. Possible values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday or Saturday.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.retention.yearly

Optional:

  • count (Number) The number of backups to keep. Must be between 1 and 10. Defaults to 7.
  • days (Number) The days of the month to retain backups of. Must be between 1 and 31. If specified, include_last_days MUST be specified as well and conflicts with weekdays and weeks.
  • include_last_days (Boolean) Including the last day of the month. If specified, days MUST be specified as well and conflicts with weekdays and weeks.
  • months (List of String) The months of the year to retain backups of. Possible values are January, February, March, April, May, June, July, August, September, October, November and December. Defaults to ["January"].
  • weekdays (List of String) The weekday backups to retain. Possible values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday or Saturday. If specified, weeks MUST be specified as well and conflicts with days and include_last_days.
  • weeks (List of String) The weeks of the month to retain backups of. Possible values are First, Second, Third, Fourth or Last. If specified, weekdays MUST be specified as well and conflicts with days and include_last_days.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.frequency

Optional:

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.frequency.daily

Required:

  • time (String) The time of day to perform the backup in 24-hour format. Times must be either on the hour or half hour (e.g. 12:00, 12:30, 13:00, etc.).

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.file_share.frequency.hourly

Required:

  • duration (Number) Species the duration of the backup window in hours. MUST be a number between 4 and 24. Details could be found here.

Note

duration must be multiplier of interval

  • interval (Number) Specifies the interval at which backup needs to be triggered. Possible values are 4, 6, 8 and 12.
  • time (String) Specifies the start time of the hourly backup. The time format should be in 24-hour format. Times must be either on the hour or half hour (e.g. 12:00, 12:30, 13:00, etc.).

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm

Required:

  • name (String) Backup policy name MUST be lowercase alphanumeric and dash, between 1 and 80 characters.
  • retention (Attributes) Configures the policy retention. (see below for nested schema)

Optional:

  • frequency (Attributes) Sets the backup frequency. Exactly one of daily, hourly or weekly MUST be specified. (see below for nested schema)
  • policy_type (Attributes) Type of the Backup Policy. Possible values are v1 or v2. Defaults to {"v1":<null>,"v2":{"instant_restore_retention_days":7}}.

Warning

Changing this forces a new resource to be created.


(see below for nested schema) - tiering_policy (Attributes) Tiering policy configuration. (see below for nested schema) - timezone (String) Specifies the Time Zone which should be used by the host pool and its associated resources for time based events, the possible values are defined here. Defaults to UTC.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.retention

Optional:

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.retention.daily

Optional:

  • count (Number) The number of backups to keep. Must be between 7 and 9999. Defaults to 33.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.retention.monthly

Optional:

  • count (Number) The number of backups to keep. Must be between 1 and 9999. Defaults to 13.
  • days (Number) The days of the month to retain backups of. Must be between 1 and 31. If specified, include_last_days MUST be specified as well and conflicts with weekdays and weeks.
  • include_last_days (Boolean) Including the last day of the month. If specified, days MUST be specified as well and conflicts with weekdays and weeks.
  • weekdays (List of String) The weekday backups to retain. Possible values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday or Saturday. If specified, weeks MUST be specified as well and conflicts with days and include_last_days.
  • weeks (List of String) The weeks of the month to retain backups of. Possible values are First, Second, Third, Fourth or Last. If specified, weekdays MUST be specified as well and conflicts with days and include_last_days.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.retention.weekly

Optional:

  • count (Number) The number of backups to keep. Must be between 1 and 9999. Defaults to 5.
  • weekdays (List of String) The weekday backups to retain. Possible values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday or Saturday.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.retention.yearly

Optional:

  • count (Number) The number of backups to keep. Must be between 1 and 9999. Defaults to 7.
  • days (Number) The days of the month to retain backups of. Must be between 1 and 31. If specified, include_last_days MUST be specified as well and conflicts with weekdays and weeks.
  • include_last_days (Boolean) Including the last day of the month. If specified, days MUST be specified as well and conflicts with weekdays and weeks.
  • months (List of String) The months of the year to retain backups of. Possible values are January, February, March, April, May, June, July, August, September, October, November and December. Defaults to ["January"].
  • weekdays (List of String) The weekday backups to retain. Possible values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday or Saturday. If specified, weeks MUST be specified as well and conflicts with days and include_last_days.
  • weeks (List of String) The weeks of the month to retain backups of. Possible values are First, Second, Third, Fourth or Last. If specified, weekdays MUST be specified as well and conflicts with days and include_last_days.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.frequency

Optional:

  • daily (Attributes) Sets the backup frequency to daily. Conflicts with hourly and weekly. (see below for nested schema)
  • hourly (Attributes) Sets the backup frequency to hourly. Conflicts with daily and weekly. (see below for nested schema)
  • weekly (Attributes) Sets the backup frequency to daily. Conflicts with daily and hourly. (see below for nested schema)

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.frequency.daily

Required:

  • time (String) The time of day to perform the backup in 24-hour format. Times must be either on the hour or half hour (e.g. 12:00, 12:30, 13:00, etc.).

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.frequency.hourly

Required:

  • duration (Number) Species the duration of the backup window in hours. MUST be a number between 4 and 24. Details could be found here.

Note

duration must be multiplier of interval

  • interval (Number) Specifies the interval at which backup needs to be triggered. Possible values are 4, 6, 8 and 12.
  • time (String) Specifies the start time of the hourly backup. The time format should be in 24-hour format. Times must be either on the hour or half hour (e.g. 12:00, 12:30, 13:00, etc.).

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.frequency.weekly

Required:

  • time (String) The time of day to perform the backup in 24-hour format. Times must be either on the hour or half hour (e.g. 12:00, 12:30, 13:00, etc.
  • weekdays (List of String) The weekday backups to retain. Possible values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday or Saturday.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.policy_type

Optional:

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.policy_type.v1

Optional:

  • instant_restore_retention_days (Number) Specifies the instant restore retention range in days. Possible values are between 1 and 5. Defaults to 5.!!! note instant_restore_retention_days MUST be set to 5 if the backup frequency is set to weekly.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.policy_type.v2

Optional:

  • instant_restore_retention_days (Number) Specifies the instant restore retention range in days. Possible values are between 1 and 30. Defaults to 7.!!! note instant_restore_retention_days MUST be set to 5 if the backup frequency is set to weekly.

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.tiering_policy

Required:

Nested Schema for configuration.backups.recovery_services_vault.backup_policies.vm.tiering_policy.archived_restore_point

Required:

  • mode (String) The tiering mode to control automatic tiering of recovery points. Possible values are TierAfter or TierRecommended.

Optional:

  • duration (Number) The number of days/weeks/months/years to retain backups in current tier before tiering.
  • duration_type (String) The retention duration type. Possible values are Days, Weeks, Months or Years.

Nested Schema for configuration.backups.recovery_services_vault.encryption

Optional:

  • enabled (Boolean) Enabling/Disabling encryption state using the Key Vault key id created part of volocloud resource. Defaults to true .!!! warning Once Encryption with your own key has been Enabled it's not possible to Disable it.
  • infrastructure_encryption (Boolean) Enabling/Disabling the Double Encryption state. Defaults to false .!!! warning Once infrastructure_encryption has been set it's not possible to change it.

Nested Schema for configuration.backups.recovery_services_vault.monitoring

Optional:

  • alerts_for_all_job_failures (Boolean) Enabling/Disabling built-in Azure Monitor alerts for security scenarios and job failure scenarios. Defaults to true.

Nested Schema for configuration.budgets

Required:

  • amount (Number) The total amount of cost to track with the budget.
  • notifications (Attributes List) One or more notification objects. (see below for nested schema)

Optional:

  • time_grain (String) The time covered by a budget. Tracking of the amount will be reset based on the time grain. Possible values are BillingAnnual, BillingMonth, BillingQuarter, Annually, Monthly and Quarterly. Defaults to Monthly. Changing this forces a new resource to be created.

Nested Schema for configuration.budgets.notifications

Required:

  • contact_emails (List of String) Specifies a list of email addresses to send the budget notification to when the threshold is exceeded.
  • threshold (Number) Threshold value associated with a notification. Notification is sent when the cost exceeded the threshold. It is always percent and has to be between 0 and 1000.

Optional:

  • operator (String) The comparison operator for the notification. Possible values are EqualTo, GreaterThan, or GreaterThanOrEqualTo. Defaults to EqualTo.
  • threshold_type (String) The type of threshold for the notification. This determines whether the notification is triggered by forecasted costs or actual costs. The allowed values are Actual and Forecasted. Default is Actual. Changing this forces a new resource to be created.

Nested Schema for configuration.keyvault

Optional:

  • purge_protection_enabled (Boolean) Is Purge Protection enabled for this Key Vault? Defaults to true.
  • sku (String) The Name of the SKU used for this Key Vault. Possible values are standard and premium. Defaults to standard.
  • soft_delete_retention_days (Number) The number of days that items should be retained for once soft-deleted. This field can only be configured one time and cannot be updated. This value can be between 7 and 90 days. Defaults to 90.

Nested Schema for configuration.log_analytics_workspace

Optional:

  • daily_quota_gb (Number) The workspace daily quota for ingestion in GB. Defaults to -1.
  • internet_ingestion_enabled (Boolean) Should the Log Analytics Workspace support ingestion over the Public Internet? Defaults to true.
  • internet_query_enabled (Boolean) Should the Log Analytics Workspace support querying over the Public Internet? Defaults to true.
  • reservation_capacity_in_gb_per_day (Number) The capacity reservation level in GB for this workspace. Must be in increments of 100 between 100 and 5000.
  • retention_in_days (Number) The workspace data retention in days. Possible values are either 7 (Free Tier only) or range between 30 and 730. Defaults to 30.
  • sku (String) Specifies the SKU of the Log Analytics Workspace. Possible values are Free, PerNode, Premium, Standard, Standalone, Unlimited, CapacityReservation, and PerGB2018. Defaults to PerGB2018.
  • solutions (List of String) List of solutions to deploy to the Log Analytics Workspace.
  • storage_account_data_source_types (List of String) The data source types which should be used for this Log Analytics Linked Storage Account. Possible values are Alerts, AzureWatson, CustomLogs, Ingestion and Query.
  • tags (Map of String) Key-value map of resource tags for all the tenancy resources.

Nested Schema for configuration.resource_groups_lock

Optional:

  • baseline (Boolean) Boolean flag to enable/disable RG lock. Defaults to true.
  • rsv (Boolean) Boolean flag to enable/disable RG lock. Defaults to false.

Import

Import is supported using the following syntax:

$ terraform import volocloud_tenancy_account_azure.example <resource ID>

Note

The format is: "account_id:tenancy_id:tenancy_account_id"