[User Guide] Core Resources - sblair01/terraform-azurerm-caf-enterprise-scale GitHub Wiki

Overview

The core capability of this module deploys the foundations of the Cloud Adoption Framework enterprise-scale landing zone architecture, with a focus on the central resource hierarchy and governance:

Resource types

The following resource types are deployed and managed by this module when using the core capabilities:

	Azure Resource	Terraform Resource
Management Groups	Microsoft.Management/managementGroups	azurerm_management_group
Management Group Subscriptions	Microsoft.Management/managementGroups/subscriptions	azurerm_management_group
Policy Assignments	Microsoft.Authorization/policyAssignments	azurerm_policy_assignment
Policy Definitions	Microsoft.Authorization/policyDefinitions	azurerm_policy_definition
Policy Set Definitions	Microsoft.Authorization/policySetDefinitions	azurerm_policy_set_definition
Role Assignments	Microsoft.Authorization/roleAssignments	azurerm_role_assignment
Role Definitions	Microsoft.Authorization/roleDefinitions	azurerm_role_definition

The exact number of resources created depends on the module configuration, but you can expect upwards of 180 resources to be created by this module for a default installation based on the example below.

NOTE: None of these resources are deployed at the Subscription scope, however Terraform still requires a Subscription to establish an authenticated session with Azure.

Next Steps

Please refer to Deploy Default Configuration for examples showing how to use this capability.