Skip to content

Terraform

Requirements

Name Version
azurerm ~> 4.52

Providers

Name Version
azurerm 4.66.0

Modules

No modules.

Resources

Name Type
azurerm_application_insights.application-insights resource
azurerm_cdn_frontdoor_custom_domain.fd-custom-domain resource
azurerm_cdn_frontdoor_custom_domain_association.web-app-custom-domain resource
azurerm_cdn_frontdoor_endpoint.frontdoor-web-endpoint resource
azurerm_cdn_frontdoor_firewall_policy.web_firewall_policy resource
azurerm_cdn_frontdoor_origin.frontdoor-web-origin resource
azurerm_cdn_frontdoor_origin_group.frontdoor-origin-group resource
azurerm_cdn_frontdoor_profile.frontdoor-web-profile resource
azurerm_cdn_frontdoor_route.frontdoor-web-route resource
azurerm_cdn_frontdoor_rule.security_headers_rule resource
azurerm_cdn_frontdoor_rule.security_txt_rule resource
azurerm_cdn_frontdoor_rule.thanks_txt_rule resource
azurerm_cdn_frontdoor_rule_set.security_headers resource
azurerm_cdn_frontdoor_rule_set.security_redirects resource
azurerm_cdn_frontdoor_security_policy.frontdoor-web-security-policy resource
azurerm_cognitive_account.ai-translator resource
azurerm_key_vault.kv resource
azurerm_key_vault_secret.application-insights-connection-string resource
azurerm_key_vault_secret.azure-translation-access-key resource
azurerm_key_vault_secret.contentful-delivery-api-key resource
azurerm_key_vault_secret.contentful-management-api-key resource
azurerm_key_vault_secret.contentful-preview-api-key resource
azurerm_key_vault_secret.contentful-space-id resource
azurerm_key_vault_secret.pdf-generation-api-key resource
azurerm_key_vault_secret.redis-enterprise-connection-string resource
azurerm_linux_web_app.web-app-service resource
azurerm_linux_web_app_slot.web-app-service-staging resource
azurerm_log_analytics_workspace.log-analytics-workspace resource
azurerm_managed_redis.redis-enterprise resource
azurerm_monitor_action_group.service-support-action resource
azurerm_monitor_diagnostic_setting.frontdoor_logging resource
azurerm_monitor_diagnostic_setting.webapp_logs resource
azurerm_monitor_metric_alert.availability-alert resource
azurerm_monitor_metric_alert.cpu_alert resource
azurerm_monitor_metric_alert.memory_alert resource
azurerm_monitor_metric_alert.web_app_error_alert resource
azurerm_monitor_smart_detector_alert_rule.dependency-performance-degradation-detector resource
azurerm_monitor_smart_detector_alert_rule.exception-volume-changed-detector resource
azurerm_monitor_smart_detector_alert_rule.failure-anomalies-detector resource
azurerm_monitor_smart_detector_alert_rule.memory-leak-detector resource
azurerm_monitor_smart_detector_alert_rule.request-performance-degradation-detector resource
azurerm_monitor_smart_detector_alert_rule.trace-severity-detector resource
azurerm_resource_group.core-rg resource
azurerm_resource_group.redis-rg resource
azurerm_resource_group.translator-rg resource
azurerm_resource_group.web-rg resource
azurerm_role_assignment.kv_admin_sp resource
azurerm_role_assignment.kv_administrator resource
azurerm_role_assignment.kv_officer resource
azurerm_role_assignment.kv_user resource
azurerm_service_plan.web-app-service-plan resource
azurerm_user_assigned_identity.cl-identity-administrator resource
azurerm_user_assigned_identity.cl-identity-reader resource
azurerm_client_config.client data source
azurerm_role_definition.kv_admin data source
azurerm_role_definition.kv_secrets_officer data source
azurerm_role_definition.kv_secrets_user data source

Inputs

Name Description Type Default Required
alerting Alerting configuration per environment
map(object({
name = string
alerts_enabled = bool
email_alerts_enabled = bool
smart_alerts_enabled = bool
thresholds = object({
availability = number
cpu = number
memory = number
error = number
})
}))
{
"d01": {
"alerts_enabled": false,
"email_alerts_enabled": false,
"name": "Test",
"smart_alerts_enabled": false,
"thresholds": {
"availability": 90,
"cpu": 95,
"error": 5,
"memory": 95
}
},
"p01": {
"alerts_enabled": true,
"email_alerts_enabled": true,
"name": "Production",
"smart_alerts_enabled": true,
"thresholds": {
"availability": 99.9,
"cpu": 85,
"error": 1,
"memory": 85
}
},
"t01": {
"alerts_enabled": true,
"email_alerts_enabled": false,
"name": "Staging",
"smart_alerts_enabled": true,
"thresholds": {
"availability": 99.9,
"cpu": 85,
"error": 1,
"memory": 85
}
}
}
no
aspnetcore_environment ASP.NET Core environment string n/a yes
azure_frontdoor_scale Azure Front Door Scale string "Standard_AzureFrontDoor" no
caching_type Caching type string n/a yes
contentful_delivery_api_key Contentful Delivery API Key string n/a yes
contentful_environment Contentful Environment string n/a yes
contentful_management_api_key Contentful Management API Key string n/a yes
contentful_preview_api_key Contentful Preview API Key string n/a yes
contentful_space_id Contentful Space ID string n/a yes
contentful_use_preview_api Use Contentful Preview API? bool n/a yes
custom_domain Custom front-door domain string "" no
elz_environment The ELZ environment to match subscription (e.g. Dev) string n/a yes
environment_prefix Environment prefix (e.g. d01) string n/a yes
gtaa_base_url The base url for the 'Get-To-An-Answer' questionnaire service string n/a yes
pdf_generation_api_key PDF Generation API Key string n/a yes
pdf_generation_use_sandbox Generate PDFs in Sandbox Mode? bool n/a yes
rebrand Force DfE Rebrand before 25th June 2025 bool false no
scripts_clarity Clarity code string n/a yes
support_alert_email Where to send alert emails to string n/a yes

Outputs

No outputs.