From the course: Deploying Enterprise Azure Secure Landing Zones with Terraform

Unlock the full course today

Join today to access over 24,100 courses taught by industry experts.

Configuring your design area

Configuring your design area - Azure Tutorial

From the course: Deploying Enterprise Azure Secure Landing Zones with Terraform

Start my 1-month free trial Buy for my team

Configuring your design area

“

- [Instructor] Congrats, you've made it this far. And we'll finally begin configuring our design areas for enterprise-scale Azure Secure Landing Zone. I'm going to begin with our settings.identity.tf file. I am going to actually recommend pasting the locals block in. Unless you want to practice your mapping and take some time manually typing out, you're going to save a ton of time by just copy and pasting. So our identity configuration block is just a ton of booleans on whether we want to implement some basic Azure policy. I currently have this as enabled. So if you don't want to deploy these identity Azure policies, you can mark that as false, and we can go down to a more granular level of specific types of Azure policy. So I'm going to keep my deny public IP address as true, as well as denying RDPs from the internet and denying subnets without network security groups. I am also not going to enable deploying Azure Backups on…

Contents