如何使用 Terraform 11.14 启用 Azure Key Vault 日志记录？

Question

如何使用 Terraform 11.14 启用 Azure Key Vault 日志记录？

Answer 1

您可以参考此示例为现有 Azure Key Vault 启用诊断设置。

例如，这对我有用。我正在使用 Terraform v0.12.5+ provider.azurermv1.32.0

编辑：您不需要引用标识符，v0.12+因为没有函数存在，即data.azurerm_key_vault.test.idvs"${data.azurerm_key_vault.test.id}"

data "azurerm_resource_group" "test"{
    name = "myrg"
}

data "azurerm_key_vault" "test" {
  name                = "mykeyvault"
  resource_group_name = "${data.azurerm_resource_group.test.name}"
}

data "azurerm_log_analytics_workspace" "test" {
  name                = "myloganalytics"
  resource_group_name = "${data.azurerm_resource_group.test.name}"
}

data "azurerm_storage_account" "test" {
  name                = "mystorageaccountname"
  resource_group_name = "${data.azurerm_resource_group.test.name}"
}

resource "azurerm_monitor_diagnostic_setting" "test" {
  name               = "example"
  target_resource_id = "${data.azurerm_key_vault.test.id}"
  storage_account_id = "${data.azurerm_storage_account.test.id}"
  log_analytics_workspace_id = "${data.azurerm_log_analytics_workspace.test.id}"


  log {
    category = "AuditEvent"
    enabled  = false

    retention_policy {
      enabled = false
    }
  }

  metric {
    category = "AllMetrics"

    retention_policy {
      enabled = false
    }
  }
}