Key Vault

1data "azurerm_client_config" "current" {}
2
3resource "azurerm_key_vault" "main" {
4  name                        = "kv-${var.project}-${var.environment}"
5  location                    = azurerm_resource_group.main.location
6  resource_group_name         = azurerm_resource_group.main.name
7  tenant_id                   = data.azurerm_client_config.current.tenant_id
8  sku_name                    = "standard"
9  soft_delete_retention_days  = 90
10  purge_protection_enabled    = true
11  enable_rbac_authorization   = true
12
13  network_acls {
14    default_action = "Deny"
15    bypass         = "AzureServices"
16  }
17
18  tags = var.tags
19}