/pgsicp-infra-kv

Main Azure keyvault used in final Project of PGSICP

Primary LanguageHCL

INFRA 1 - pgsicp-infra-kv-prd

This terraform project was created for the final project of PGSICP, a cybersecurity post-grad from ISEP.

About this repo

Goal: Create the main Azure keyvault that will store infrastructure secrets.

Actions performed by this project:

  • Create azure keyvault
  • Create azure App Registration (to grant programmatic access to the keyvault)
  • Create a secret (similar to a password) in the App Registration
  • Save secret and clientID from AppReg in the keyvault
  • Grant access to keyvault to user hflacerda and to the AppReg created

To use this project:

  • Terraform 1.2 or higher installed
  • Azure subscription
  • Replace values in backend.tf file (tenantID, subscriptionID, storage account
  • Replace values in vars.tf file (resource name, tags, tenantID, subscriptionID, accountIDs, etc)