# Sample Cloud Adoption Framework foundations landing zone
## globalsettings
global_settings = {
#specifies the set of locations you are going to use in this landing zone
location_map = {
australiaeast = "australiaeast"
australiasoutheast = "australiasoutheast"
}
#naming convention to be used as defined in naming convention module, accepted values are cafclassic, cafrandom, random, passthrough
convention = "cafrandom"
#Set of tags for core operations
tags_hub = {
owner = "CAF"
environment = "sandbox"
deploymentType = "Terraform"
costCenter = "000000"
businessUnit = "ITS"
DR = "NON-DR-ENABLED"
}
# Set of resource groups to land the foundations
resource_groups_hub = {
australiaeast = {
HUB-CORE-SEC = {
name = "sandbox-core-sec-ae"
location = "australiaeast"
}
HUB-OPERATIONS = {
name = "sandbox-operations-ae"
location = "australiaeast"
}
}
australiasoutheast = {
HUB-CORE-SEC = {
name = "sandbox-core-sec-ase"
location = "australiasoutheast"
}
HUB-OPERATIONS = {
name = "sandbox-operations-ase"
location = "australiasoutheast"
}
}
}
}
## accounting settings
accounting_settings = {
# Azure diagnostics logs retention period
australiaeast = {
# Azure Subscription activity logs retention period
azure_activity_log_enabled = true
azure_activity_logs_name = "actlogs"
azure_activity_logs_event_hub = false
azure_activity_logs_retention = 365
azure_activity_audit = {
log = [
# ["Audit category name", "Audit enabled)"]
["Administrative", true],
["Security", true],
["ServiceHealth", true],
["Alert", true],
["Recommendation", true],
["Policy", true],
["Autoscale", true],
["ResourceHealth", true],
]
}
azure_diagnostics_logs_name = "diaglogs"
azure_diagnostics_logs_event_hub = false
#Logging and monitoring
analytics_workspace_name = "caflalogs-ae"
##Log analytics solutions to be deployed
solution_plan_map = {
NetworkMonitoring = {
"publisher" = "Microsoft"
"product" = "OMSGallery/NetworkMonitoring"
},
ADAssessment = {
"publisher" = "Microsoft"
"product" = "OMSGallery/ADAssessment"
},
ADReplication = {
"publisher" = "Microsoft"
"product" = "OMSGallery/ADReplication"
},
AgentHealthAssessment = {
"publisher" = "Microsoft"
"product" = "OMSGallery/AgentHealthAssessment"
},
DnsAnalytics = {
"publisher" = "Microsoft"
"product" = "OMSGallery/DnsAnalytics"
},
ContainerInsights = {
"publisher" = "Microsoft"
"product" = "OMSGallery/ContainerInsights"
},
KeyVaultAnalytics = {
"publisher" = "Microsoft"
"product" = "OMSGallery/KeyVaultAnalytics"
}
}
}
australiasoutheast = {
# Azure Subscription activity logs retention period
azure_activity_log_enabled = true
azure_activity_logs_name = "actlogs"
azure_activity_logs_event_hub = false
azure_activity_logs_retention = 365
azure_activity_audit = {
log = [
# ["Audit category name", "Audit enabled)"]
["Administrative", true],
["Security", true],
["ServiceHealth", true],
["Alert", true],
["Recommendation", true],
["Policy", true],
["Autoscale", true],
["ResourceHealth", true],
]
}
azure_diagnostics_logs_name = "diaglogs"
azure_diagnostics_logs_event_hub = false
#Logging and monitoring
analytics_workspace_name = "caflalogs-ase"
##Log analytics solutions to be deployed
solution_plan_map = {
NetworkMonitoring = {
"publisher" = "Microsoft"
"product" = "OMSGallery/NetworkMonitoring"
},
ADAssessment = {
"publisher" = "Microsoft"
"product" = "OMSGallery/ADAssessment"
},
ADReplication = {
"publisher" = "Microsoft"
"product" = "OMSGallery/ADReplication"
},
AgentHealthAssessment = {
"publisher" = "Microsoft"
"product" = "OMSGallery/AgentHealthAssessment"
},
DnsAnalytics = {
"publisher" = "Microsoft"
"product" = "OMSGallery/DnsAnalytics"
},
ContainerInsights = {
"publisher" = "Microsoft"
"product" = "OMSGallery/ContainerInsights"
},
KeyVaultAnalytics = {
"publisher" = "Microsoft"
"product" = "OMSGallery/KeyVaultAnalytics"
}
}
}
}
## governance
governance_settings = {
australiaeast = {
#current code supports only two levels of managemenr groups and one root
deploy_mgmt_groups = false
management_groups = {
root = {
name = "caf-rootmgmtgroup"
subscriptions = []
#list your subscriptions ID in this field as ["GUID1", "GUID2"]
children = {
child1 = {
name = "tree1child1"
subscriptions = []
}
child2 = {
name = "tree1child2"
subscriptions = []
}
child3 = {
name = "tree1child3"
subscriptions = []
}
}
}
}
policy_matrix = {
# autoenroll_asc = true # - to be implemented via builtin policies
autoenroll_monitor_vm = true
autoenroll_netwatcher = true
no_public_ip_spoke = true
cant_create_ip_spoke = true
managed_disks_only = true
restrict_locations = true
list_of_allowed_locs = ["australiaeast", "australiasoutheast"]
restrict_supported_svc = false
list_of_supported_svc = ["Microsoft.Network/publicIPAddresses", "Microsoft.Compute/disks"]
msi_location = "australiaeast"
}
}
australiasoutheast = {}
}
## security
security_settings = {
#Azure Security Center Configuration
enable_security_center = true
security_center = {
contact_email = "[email protected]"
contact_phone = "006499236000"
alerts_to_admins = true
alert_notifications = true
}
#Enables Azure Sentinel on the Log Analaytics repo
enable_sentinel = true
}
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent