Home

Terraform Module for Cloud Adoption Framework Enterprise-scale

The Terraform Module for Cloud Adoption Framework Enterprise-scale provides an opinionated approach for delivering the core platform capabilities needed to start building Azure landing zones using Terraform. This module deploys the foundations of the Cloud Adoption Framework enterprise-scale landing zone architecture, with a focus on the central resource hierarchy and governance:

The module provides a consistent approach for deploying the following components from the Enterprise-scale critical design areas:

• Management Group and Subscription organisation
  • Create the Management Group resource hierarchy
  • Assign Subscriptions to Management Groups
  • Create custom Policy Assignments, Policy Definitions and Policy Set Definitions (Initiatives)
• Identity and access management
  • Create custom Role Assignments and Role Definitions

The following resource types are deployed and managed by this module:

	Azure Resource	Terraform Resource
Management Groups	Microsoft.Management/managementGroups	azurerm_management_group
Policy Assignments	Microsoft.Authorization/policyAssignments	azurerm_policy_assignment
Policy Definitions	Microsoft.Authorization/policyDefinitions	azurerm_policy_definition
Policy Set Definitions	Microsoft.Authorization/policySetDefinitions	azurerm_policy_set_definition
Role Assignments	Microsoft.Authorization/roleAssignments	azurerm_role_assignment
Role Definitions	Microsoft.Authorization/roleDefinitions	azurerm_role_definition

Next Steps

Check out the User Guide, or go straight to our Examples.