{"id":51410833,"url":"https://github.com/launchbynttdata/tf-azurerm-module_reference-app_configuration","last_synced_at":"2026-07-04T14:32:31.967Z","repository":{"id":352932552,"uuid":"813813991","full_name":"launchbynttdata/tf-azurerm-module_reference-app_configuration","owner":"launchbynttdata","description":null,"archived":false,"fork":false,"pushed_at":"2026-04-21T19:55:24.000Z","size":85,"stargazers_count":0,"open_issues_count":2,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-04-21T20:19:41.555Z","etag":null,"topics":["azure","infrastructure-as-code","platform-automation","reference","terraform"],"latest_commit_sha":null,"homepage":null,"language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/launchbynttdata.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-06-11T19:46:20.000Z","updated_at":"2025-02-26T18:59:24.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/launchbynttdata/tf-azurerm-module_reference-app_configuration","commit_stats":null,"previous_names":["launchbynttdata/tf-azurerm-module_reference-app_configuration"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/launchbynttdata/tf-azurerm-module_reference-app_configuration","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-azurerm-module_reference-app_configuration","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-azurerm-module_reference-app_configuration/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-azurerm-module_reference-app_configuration/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-azurerm-module_reference-app_configuration/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/launchbynttdata","download_url":"https://codeload.github.com/launchbynttdata/tf-azurerm-module_reference-app_configuration/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/launchbynttdata%2Ftf-azurerm-module_reference-app_configuration/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35125718,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-04T02:00:05.987Z","response_time":113,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["azure","infrastructure-as-code","platform-automation","reference","terraform"],"created_at":"2026-07-04T14:32:30.188Z","updated_at":"2026-07-04T14:32:31.956Z","avatar_url":"https://github.com/launchbynttdata.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Your Module Name\n\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![License: CC BY-NC-ND 4.0](https://img.shields.io/badge/License-CC_BY--NC--ND_4.0-lightgrey.svg)](https://creativecommons.org/licenses/by-nc-nd/4.0/)\n\n## Overview\n\nThis terraform module provisions an Azure App Configuration with all its dependencies.\n\nThis reference module is built as a wrapper around the primitive module tf-azurerm-module_primitive-app_configuration\n\n## Pre-Commit hooks\n\n[.pre-commit-config.yaml](.pre-commit-config.yaml) file defines certain `pre-commit` hooks that are relevant to terraform, golang and common linting tasks. There are no custom hooks added.\n\n`commitlint` hook enforces commit message in certain format. The commit contains the following structural elements, to communicate intent to the consumers of your commit messages:\n\n- **fix**: a commit of the type `fix` patches a bug in your codebase (this correlates with PATCH in Semantic Versioning).\n- **feat**: a commit of the type `feat` introduces a new feature to the codebase (this correlates with MINOR in Semantic Versioning).\n- **BREAKING CHANGE**: a commit that has a footer `BREAKING CHANGE:`, or appends a `!` after the type/scope, introduces a breaking API change (correlating with MAJOR in Semantic Versioning). A BREAKING CHANGE can be part of commits of any type.\nfooters other than BREAKING CHANGE: \u003cdescription\u003e may be provided and follow a convention similar to git trailer format.\n- **build**: a commit of the type `build` adds changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)\n- **chore**: a commit of the type `chore` adds changes that don't modify src or test files\n- **ci**: a commit of the type `ci` adds changes to our CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs)\n- **docs**: a commit of the type `docs` adds documentation only changes\n- **perf**: a commit of the type `perf` adds code change that improves performance\n- **refactor**: a commit of the type `refactor` adds code change that neither fixes a bug nor adds a feature\n- **revert**: a commit of the type `revert` reverts a previous commit\n- **style**: a commit of the type `style` adds code changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc)\n- **test**: a commit of the type `test` adds missing tests or correcting existing tests\n\nBase configuration used for this project is [commitlint-config-conventional (based on the Angular convention)](https://github.com/conventional-changelog/commitlint/tree/master/@commitlint/config-conventional#type-enum)\n\nIf you are a developer using vscode, [this](https://marketplace.visualstudio.com/items?itemName=joshbolduc.commitlint) plugin may be helpful.\n\n`detect-secrets-hook` prevents new secrets from being introduced into the baseline. TODO: INSERT DOC LINK ABOUT HOOKS\n\nIn order for `pre-commit` hooks to work properly\n\n- You need to have the pre-commit package manager installed. [Here](https://pre-commit.com/#install) are the installation instructions.\n- `pre-commit` would install all the hooks when commit message is added by default except for `commitlint` hook. `commitlint` hook would need to be installed manually using the command below\n\n```\npre-commit install --hook-type commit-msg\n```\n\n## To test the resource group module locally\n\n1. For development/enhancements to this module locally, you'll need to install all of its components. This is controlled by the `configure` target in the project's [`Makefile`](./Makefile). Before you can run `configure`, familiarize yourself with the variables in the `Makefile` and ensure they're pointing to the right places.\n\n```\nmake configure\n```\n\nThis adds in several files and directories that are ignored by `git`. They expose many new Make targets.\n\n2. _THIS STEP APPLIES ONLY TO MICROSOFT AZURE. IF YOU ARE USING A DIFFERENT PLATFORM PLEASE SKIP THIS STEP._ The first target you care about is `env`. This is the common interface for setting up environment variables. The values of the environment variables will be used to authenticate with cloud provider from local development workstation.\n\n`make configure` command will bring down `azure_env.sh` file on local workstation. Devloper would need to modify this file, replace the environment variable values with relevant values.\n\nThese environment variables are used by `terratest` integration suit.\n\nService principle used for authentication(value of ARM_CLIENT_ID) should have below privileges on resource group within the subscription.\n\n```\n\"Microsoft.Resources/subscriptions/resourceGroups/write\"\n\"Microsoft.Resources/subscriptions/resourceGroups/read\"\n\"Microsoft.Resources/subscriptions/resourceGroups/delete\"\n```\n\nThen run this make target to set the environment variables on developer workstation.\n\n```\nmake env\n```\n\n3. The first target you care about is `check`.\n\n**Pre-requisites**\nBefore running this target it is important to ensure that, developer has created files mentioned below on local workstation under root directory of git repository that contains code for primitives/segments. Note that these files are `azure` specific. If primitive/segment under development uses any other cloud provider than azure, this section may not be relevant.\n\n- A file named `provider.tf` with contents below\n\n```\nprovider \"azurerm\" {\n  features {}\n}\n```\n\n- A file named `terraform.tfvars` which contains key value pair of variables used.\n\nNote that since these files are added in `gitignore` they would not be checked in into primitive/segment's git repo.\n\nAfter creating these files, for running tests associated with the primitive/segment, run\n\n```\nmake check\n```\n\nIf `make check` target is successful, developer is good to commit the code to primitive/segment's git repo.\n\n`make check` target\n\n- runs `terraform commands` to `lint`,`validate` and `plan` terraform code.\n- runs `conftests`. `conftests` make sure `policy` checks are successful.\n- runs `terratest`. This is integration test suit.\n- runs `opa` tests\n\u003c!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n## Requirements\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"requirement_terraform\"\u003e\u003c/a\u003e [terraform](#requirement\\_terraform) | ~\u003e 1.0 |\n| \u003ca name=\"requirement_azurerm\"\u003e\u003c/a\u003e [azurerm](#requirement\\_azurerm) | ~\u003e 3.117 |\n\n## Providers\n\nNo providers.\n\n## Modules\n\n| Name | Source | Version |\n|------|--------|---------|\n| \u003ca name=\"module_resource_names\"\u003e\u003c/a\u003e [resource\\_names](#module\\_resource\\_names) | terraform.registry.launch.nttdata.com/module_library/resource_name/launch | ~\u003e 2.0 |\n| \u003ca name=\"module_resource_group\"\u003e\u003c/a\u003e [resource\\_group](#module\\_resource\\_group) | terraform.registry.launch.nttdata.com/module_primitive/resource_group/azurerm | ~\u003e 1.1 |\n| \u003ca name=\"module_app_configuration\"\u003e\u003c/a\u003e [app\\_configuration](#module\\_app\\_configuration) | terraform.registry.launch.nttdata.com/module_primitive/app_configuration/azurerm | ~\u003e 1.0 |\n| \u003ca name=\"module_app_configuration_data\"\u003e\u003c/a\u003e [app\\_configuration\\_data](#module\\_app\\_configuration\\_data) | terraform.registry.launch.nttdata.com/module_primitive/app_configuration_data/azurerm | ~\u003e 1.0 |\n| \u003ca name=\"module_private_endpoint\"\u003e\u003c/a\u003e [private\\_endpoint](#module\\_private\\_endpoint) | terraform.registry.launch.nttdata.com/module_primitive/private_endpoint/azurerm | ~\u003e 1.0 |\n\n## Resources\n\nNo resources.\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_resource_names_map\"\u003e\u003c/a\u003e [resource\\_names\\_map](#input\\_resource\\_names\\_map) | A map of key to resource\\_name that will be used by tf-launch-module\\_library-resource\\_name to generate resource names | \u003cpre\u003emap(object({\u003cbr/\u003e    name       = string\u003cbr/\u003e    max_length = optional(number, 60)\u003cbr/\u003e  }))\u003c/pre\u003e | \u003cpre\u003e{\u003cbr/\u003e  \"app_configuration\": {\u003cbr/\u003e    \"max_length\": 80,\u003cbr/\u003e    \"name\": \"appcs\"\u003cbr/\u003e  },\u003cbr/\u003e  \"key_vault\": {\u003cbr/\u003e    \"max_length\": 24,\u003cbr/\u003e    \"name\": \"kv\"\u003cbr/\u003e  },\u003cbr/\u003e  \"private_endpoint\": {\u003cbr/\u003e    \"max_length\": 80,\u003cbr/\u003e    \"name\": \"pe\"\u003cbr/\u003e  },\u003cbr/\u003e  \"private_service_connection\": {\u003cbr/\u003e    \"max_length\": 80,\u003cbr/\u003e    \"name\": \"pesc\"\u003cbr/\u003e  },\u003cbr/\u003e  \"resource_group\": {\u003cbr/\u003e    \"max_length\": 80,\u003cbr/\u003e    \"name\": \"rg\"\u003cbr/\u003e  }\u003cbr/\u003e}\u003c/pre\u003e | no |\n| \u003ca name=\"input_instance_env\"\u003e\u003c/a\u003e [instance\\_env](#input\\_instance\\_env) | Number that represents the instance of the environment. | `number` | `0` | no |\n| \u003ca name=\"input_instance_resource\"\u003e\u003c/a\u003e [instance\\_resource](#input\\_instance\\_resource) | Number that represents the instance of the resource. | `number` | `0` | no |\n| \u003ca name=\"input_logical_product_family\"\u003e\u003c/a\u003e [logical\\_product\\_family](#input\\_logical\\_product\\_family) | (Required) Name of the product family for which the resource is created.\u003cbr/\u003e    Example: org\\_name, department\\_name. | `string` | `\"launch\"` | no |\n| \u003ca name=\"input_logical_product_service\"\u003e\u003c/a\u003e [logical\\_product\\_service](#input\\_logical\\_product\\_service) | (Required) Name of the product service for which the resource is created.\u003cbr/\u003e    For example, backend, frontend, middleware etc. | `string` | `\"appcs\"` | no |\n| \u003ca name=\"input_class_env\"\u003e\u003c/a\u003e [class\\_env](#input\\_class\\_env) | (Required) Environment where resource is going to be deployed. For example. dev, qa, uat | `string` | `\"dev\"` | no |\n| \u003ca name=\"input_location\"\u003e\u003c/a\u003e [location](#input\\_location) | target resource group resource mask | `string` | `\"eastus\"` | no |\n| \u003ca name=\"input_resource_group_name\"\u003e\u003c/a\u003e [resource\\_group\\_name](#input\\_resource\\_group\\_name) | Resource group name | `string` | `null` | no |\n| \u003ca name=\"input_use_azure_region_abbr\"\u003e\u003c/a\u003e [use\\_azure\\_region\\_abbr](#input\\_use\\_azure\\_region\\_abbr) | Use Azure region abbreviation in resource names | `bool` | `true` | no |\n| \u003ca name=\"input_tags\"\u003e\u003c/a\u003e [tags](#input\\_tags) | Custom tags for the deployment | `map(string)` | `{}` | no |\n| \u003ca name=\"input_customer_managed_encryption_key\"\u003e\u003c/a\u003e [customer\\_managed\\_encryption\\_key](#input\\_customer\\_managed\\_encryption\\_key) | The customer managed encryption key configuration\u003cbr/\u003e    Requires a user assigned identity with read access to the desired key.\u003cbr/\u003e    The user assigned identity must be provided in the `identity_ids` variable. | \u003cpre\u003eobject({\u003cbr/\u003e    key_vault_key_id   = string\u003cbr/\u003e    identity_client_id = string\u003cbr/\u003e  })\u003c/pre\u003e | `null` | no |\n| \u003ca name=\"input_local_auth_enabled\"\u003e\u003c/a\u003e [local\\_auth\\_enabled](#input\\_local\\_auth\\_enabled) | Whether local authentication methods is enabled. | `bool` | `true` | no |\n| \u003ca name=\"input_public_network_access\"\u003e\u003c/a\u003e [public\\_network\\_access](#input\\_public\\_network\\_access) | Whether public network access is enabled. Possible values are 'Enabled' and 'Disabled'. | `string` | `\"Enabled\"` | no |\n| \u003ca name=\"input_purge_protection_enabled\"\u003e\u003c/a\u003e [purge\\_protection\\_enabled](#input\\_purge\\_protection\\_enabled) | Whether purge protection is enabled. | `bool` | `false` | no |\n| \u003ca name=\"input_replicas\"\u003e\u003c/a\u003e [replicas](#input\\_replicas) | Locations to replicate the App configuration store | `map(string)` | `null` | no |\n| \u003ca name=\"input_sku\"\u003e\u003c/a\u003e [sku](#input\\_sku) | The SKU of the App Configuration. Possible values are 'free' and 'standard'. | `string` | `\"free\"` | no |\n| \u003ca name=\"input_soft_delete_retention_days\"\u003e\u003c/a\u003e [soft\\_delete\\_retention\\_days](#input\\_soft\\_delete\\_retention\\_days) | The number of days that items should be retained for once soft-deleted. | `number` | `7` | no |\n| \u003ca name=\"input_identity_ids\"\u003e\u003c/a\u003e [identity\\_ids](#input\\_identity\\_ids) | Specifies a list of user managed identity ids to be assigned. | `list(string)` | `null` | no |\n| \u003ca name=\"input_keys\"\u003e\u003c/a\u003e [keys](#input\\_keys) | map(object({\u003cbr/\u003e      content\\_type        = content type of the configuration key\u003cbr/\u003e      label               = label (partition) of the app configuration store\u003cbr/\u003e      value               = value of the configuration key\u003cbr/\u003e      locked              = whether the key is locked to prevent changes\u003cbr/\u003e      type                = type of the configuration key, `kv` or `vault` (key vault reference)\u003cbr/\u003e      vault\\_key\\_reference = id of the vault secret this key refers to\u003cbr/\u003e      tags                = custom tags to assign\u003cbr/\u003e    })) | \u003cpre\u003emap(object({\u003cbr/\u003e    content_type        = optional(string)\u003cbr/\u003e    label               = optional(string)\u003cbr/\u003e    value               = optional(string)\u003cbr/\u003e    locked              = optional(bool)\u003cbr/\u003e    type                = optional(string)\u003cbr/\u003e    vault_key_reference = optional(string)\u003cbr/\u003e    tags                = optional(map(string))\u003cbr/\u003e  }))\u003c/pre\u003e | `{}` | no |\n| \u003ca name=\"input_features\"\u003e\u003c/a\u003e [features](#input\\_features) | map(object({\u003cbr/\u003e      name        = name of the feature flag\u003cbr/\u003e      description = description of the feature\u003cbr/\u003e      enabled     = status of the feature, defaults to false\u003cbr/\u003e      label       = label (partition) of the app configuration store\u003cbr/\u003e      locked      = whether the feature is locked to prevent changes\u003cbr/\u003e\u003cbr/\u003e      targeting\\_filter = optional(object({\u003cbr/\u003e        default\\_rollout\\_percentage = default percentage of the user base for which to enable the feature\u003cbr/\u003e        groups                     = map of groups and their rollout percentages (groups defined in the application logic)\u003cbr/\u003e        users                      = list of users to target (users defined in the application logic)\u003cbr/\u003e      }))\u003cbr/\u003e\u003cbr/\u003e      timewindow\\_filter = optional(object({\u003cbr/\u003e        start = the earliest timestamp the feature is enabled, RFC3339 format\u003cbr/\u003e        end   = the latest timestamp the feature is enabled, RFC3339 format\u003cbr/\u003e      }))\u003cbr/\u003e    })) | \u003cpre\u003emap(object({\u003cbr/\u003e    name        = string\u003cbr/\u003e    description = optional(string)\u003cbr/\u003e    enabled     = optional(bool)\u003cbr/\u003e    label       = optional(string)\u003cbr/\u003e    locked      = optional(bool)\u003cbr/\u003e\u003cbr/\u003e    targeting_filter = optional(object({\u003cbr/\u003e      default_rollout_percentage = number\u003cbr/\u003e      groups                     = optional(map(number))\u003cbr/\u003e      users                      = optional(list(string))\u003cbr/\u003e    }))\u003cbr/\u003e\u003cbr/\u003e    timewindow_filter = optional(object({\u003cbr/\u003e      start = optional(string)\u003cbr/\u003e      end   = optional(string)\u003cbr/\u003e    }))\u003cbr/\u003e  }))\u003c/pre\u003e | `{}` | no |\n| \u003ca name=\"input_private_dns_zone_ids\"\u003e\u003c/a\u003e [private\\_dns\\_zone\\_ids](#input\\_private\\_dns\\_zone\\_ids) | A list of private DNS zone IDs to link to the azure app configuration and only available\u003cbr/\u003e    when `public_network_access` is set to 'Disabled' | `list(string)` | `[]` | no |\n| \u003ca name=\"input_private_endpoint_subnet_id\"\u003e\u003c/a\u003e [private\\_endpoint\\_subnet\\_id](#input\\_private\\_endpoint\\_subnet\\_id) | ID of the subnet where the private endpoint should be deployed\u003cbr/\u003e    Required when `public_network_access` is set to 'Disabled' | `string` | `null` | no |\n\n## Outputs\n\n| Name | Description |\n|------|-------------|\n| \u003ca name=\"output_app_configuration_id\"\u003e\u003c/a\u003e [app\\_configuration\\_id](#output\\_app\\_configuration\\_id) | n/a |\n| \u003ca name=\"output_app_configuration_name\"\u003e\u003c/a\u003e [app\\_configuration\\_name](#output\\_app\\_configuration\\_name) | n/a |\n| \u003ca name=\"output_app_configuration_endpoint\"\u003e\u003c/a\u003e [app\\_configuration\\_endpoint](#output\\_app\\_configuration\\_endpoint) | n/a |\n| \u003ca name=\"output_app_configuration_primary_read_key\"\u003e\u003c/a\u003e [app\\_configuration\\_primary\\_read\\_key](#output\\_app\\_configuration\\_primary\\_read\\_key) | n/a |\n| \u003ca name=\"output_app_configuration_primary_write_key\"\u003e\u003c/a\u003e [app\\_configuration\\_primary\\_write\\_key](#output\\_app\\_configuration\\_primary\\_write\\_key) | n/a |\n| \u003ca name=\"output_app_configuration_secondary_read_key\"\u003e\u003c/a\u003e [app\\_configuration\\_secondary\\_read\\_key](#output\\_app\\_configuration\\_secondary\\_read\\_key) | n/a |\n| \u003ca name=\"output_app_configuration_secondary_write_key\"\u003e\u003c/a\u003e [app\\_configuration\\_secondary\\_write\\_key](#output\\_app\\_configuration\\_secondary\\_write\\_key) | n/a |\n| \u003ca name=\"output_app_configuration_identity\"\u003e\u003c/a\u003e [app\\_configuration\\_identity](#output\\_app\\_configuration\\_identity) | n/a |\n| \u003ca name=\"output_app_configuration_replica\"\u003e\u003c/a\u003e [app\\_configuration\\_replica](#output\\_app\\_configuration\\_replica) | n/a |\n| \u003ca name=\"output_app_configuration_keys\"\u003e\u003c/a\u003e [app\\_configuration\\_keys](#output\\_app\\_configuration\\_keys) | n/a |\n| \u003ca name=\"output_app_configuration_features\"\u003e\u003c/a\u003e [app\\_configuration\\_features](#output\\_app\\_configuration\\_features) | n/a |\n\u003c!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK --\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flaunchbynttdata%2Ftf-azurerm-module_reference-app_configuration","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flaunchbynttdata%2Ftf-azurerm-module_reference-app_configuration","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flaunchbynttdata%2Ftf-azurerm-module_reference-app_configuration/lists"}