module "azurekevault" {
    source  = "aztfmod/caf-keyvault/azurerm"
    version = "0.x.y"

    prefix                            = var.prefix
    location                          = var.location
    rg                                = var.rg
    akv_config                        = var.akv_config
    tags                              = var.tags
    diagnostics_settings              = var.ipdiags
    diagnostics_map                   = var.diagsmap
    log_analytics_workspace           = var.laworkspace
}

variable "akv_config" {
  description = "(Required) Key Vault Configuration Object"
}

akv_config = {
    name       = "myakv"

    akv_features = {
        enabled_for_disk_encryption = true
        enabled_for_deployment      = false
        enabled_for_template_deployment = true
    }
    #akv_features is optional

    sku_name = "premium"
    network_acls = {
         bypass = "AzureServices"
         default_action = "Deny"
    }
    #network_acls is optional
}

variable "location" {
  description = "(Required) Location of the AKV to be created"
}

location = "southeastasia"

variable "rg" {
  description = "(Required) Resource group of the public IP to be created"
}

rg = "myrg"

variable "tags" {
  description = "(Required) map of tags for the deployment"
}

tags = {
    environment     = "DEV"
    owner           = "Arnaud"
    deploymentType  = "Terraform"
  }

variable "log_analytics_workspace" {
  description = "(Required) Log Analytics workspace for AKV"
}

log_analytics_workspace = module.loganalytics.object

variable "diagnostics_map" {
 description = "(Required) Map with the diagnostics repository information"
}

  diagnostics_map = {
      diags_sa      = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/arnaud-hub-operations/providers/Microsoft.Storage/storageAccounts/opslogskumowxv"
      eh_id         = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/arnaud-hub-operations/providers/Microsoft.EventHub/namespaces/opslogskumowxv"
      eh_name       = "opslogskumowxv"
  }

variable "diagnostics_settings" {
 description = "(Required) Map with the diagnostics settings for AKV deployment"
}

diagnostics_settings = {
    log = [
                # ["Category name",  "Diagnostics Enabled(true/false)", "Retention Enabled(true/false)", Retention_period]
                ["AuditEvent", true, true, 60],
        ]
    metric = [
                #["Category name",  "Diagnostics Enabled(true/false)", "Retention Enabled(true/false)", Retention_period]
                  ["AllMetrics", true, true, 60],
    ]
}

variable "convention" {
  description = "(Required) Naming convention used"
}

convention = "cafclassic"