| default_tags |
Map of default tags to assign to all resources. Tags help organize and identify resources in Azure. |
map(any) |
{
"ManagedByTerraform": "True"
} |
no |
| environment |
Environment in which this resource is deployed (e.g., dev, test, prod). |
string |
"dev" |
no |
| mssql_server_admin_login |
Administrator login for the SQL Server. Required unless Azure AD only authentication is used. |
string |
n/a |
yes |
| mssql_server_admin_password |
Password for the SQL Server administrator. Must meet Azure Password Policy. |
string |
n/a |
yes |
| mssql_server_azure_ad_admin_login |
Login username for the Azure AD Administrator of the SQL Server. |
string |
"" |
no |
| mssql_server_azure_ad_admin_object_id |
Object ID of the Azure AD Administrator. |
string |
"" |
no |
| mssql_server_azure_tenant_id |
Azure Tenant ID of the Azure AD Administrator. |
string |
"" |
no |
| mssql_server_connection_policy |
Connection policy for the SQL Server. Valid values: Default, Proxy, Redirect. |
string |
"Default" |
no |
| mssql_server_extended_auditing |
Optional extended auditing policy for SQL Server. Provide as a map:
- storage_endpoint (string, required)
- storage_account_access_key (string, required)
- retention_in_days (number, optional, default 90) |
any |
null |
no |
| mssql_server_identity_type |
Type of identity for the SQL Server. Options: None, SystemAssigned. |
string |
"SystemAssigned" |
no |
| mssql_server_ip_rules |
Map of allowed IP addresses or CIDRs for firewall rules. Key = name, value = IP/CIDR. |
map(string) |
{} |
no |
| mssql_server_key_vault_key_id |
Optional Key Vault key ID for TDE encryption (Customer Managed Key). If not set, TDE uses service-managed keys. |
string |
null |
no |
| mssql_server_minimum_tls_version |
Minimum TLS version enforced for SQL connections. Valid values: 1.0, 1.1, 1.2, Disabled. |
string |
"1.2" |
no |
| mssql_server_name |
Base name for the Microsoft SQL Server. Must be globally unique. |
string |
n/a |
yes |
| mssql_server_public_network_access_enabled |
Enable or disable public network access to the SQL Server. |
bool |
true |
no |
| mssql_server_version |
SQL Server version. Valid values: 2.0 (v11) and 12.0 (v12). |
string |
"12.0" |
no |
| region |
Azure region where resources will be deployed. |
string |
"westeurope" |
no |
| resource_group_location |
Location of the Resource Group. Changing this will force a new resource creation. |
string |
"westeurope" |
no |
| resource_group_name |
Name of the existing Azure Resource Group to deploy the SQL Server into. |
string |
n/a |
yes |