| custom_access_ids |
Object with Principal Ids and List of Access to Secrets, Keys, and Certificates. Used to give more granular control over the template access policies (read/admin) |
map(object({
clientid = string
certificate_permissions = optional(set(string), [])
key_permissions = optional(set(string), [])
secret_permissions = optional(set(string), [])
})) |
{} |
no |
| firewall_allow_all |
Allow All Public Networks through firewall? |
string |
false |
no |
| firewall_allow_azure_services |
Can Azure Services bypass firewall? |
bool |
true |
no |
| firewall_allowed_ip_cidr_list |
n/a |
list(string) |
[] |
no |
| firewall_allowed_subnets |
List of VNet Subnet ids that have access |
list(string) |
[] |
no |
| name |
Required. Name of KeyVault resource |
string |
n/a |
yes |
| private_endpoint_dns_zone_ids |
List of Ids, of Private Endpoint DNS Zones (azurerm_private_dns_zone) |
list(string) |
[
"/subscriptions/240c78f2-bab6-4e50-9d4f-cc49534b3eec/resourceGroups/cmgdnsprresrgprod01/providers/Microsoft.Network/privateDnsZones/privatelink.vaultcore.azure.net"
] |
no |
| private_endpoint_name |
Name of the Private Endpoint resource |
string |
null |
no |
| private_endpoint_service_name |
Name of the Private Endpoint Service resource |
string |
null |
no |
| private_endpoint_subnet_id |
Id of the subnet for Private Endpoints |
string |
null |
no |
| private_endpoint_zone_group_name |
Name of the Private Endpoint Zone Group resource |
string |
null |
no |
| rg |
Resource Group object |
object({
location = string
name = string
}) |
n/a |
yes |
| tags |
Tags to be merged with module tags (forming local.tags) |
map(string) |
{} |
no |