-
Notifications
You must be signed in to change notification settings - Fork 13
/
variables.tf
51 lines (44 loc) · 1.74 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
variable "policy_display_name" {
description = "The display name of the policy definition."
type = string
}
variable "policy_description" {
description = "The description of the policy definition."
type = string
default = ""
}
variable "policy_rule_content" {
description = "The policy rule for the policy definition. This is a json object representing the rule that contains an if and a then block."
type = string
}
variable "policy_parameters_content" {
description = "Parameters for the policy definition. This field is a json object that allows you to parameterize your policy definition."
type = string
}
variable "policy_mode" {
description = "The policy mode that allows you to specify which resource types will be evaluated. The value can be `All`, `Indexed` or `NotSpecified`."
type = string
default = "All"
}
variable "policy_assignments" {
description = "Map with maps to configure assignments. Map key is the name of the assignment."
type = map(object({
display_name = string,
description = string,
scope_id = string,
scope_type = string,
parameters = string,
identity_type = string,
location = string,
enforce = bool,
}))
validation {
condition = can([for p in var.policy_assignments : contains(["subscription", "management-group", "resource-group", "resource"], lower(p.scope_type))])
error_message = "The `policy_assignments[*].scope_type` value must be valid. Possible values are `subscription`, `management-group`, `resource-group` or `resource`."
}
}
variable "policy_mgmt_group_name" {
description = "Create the Policy Definition at the Management Group level"
type = string
default = null
}