https://github.com/jksprattler/azure-security
Azure AD, RBAC, Policy, Secure vWAN, hybrid AD design proof of concepts/labs/demos using Terraform, Python
https://github.com/jksprattler/azure-security
azure azure-security azuread terraform
Last synced: 10 days ago
JSON representation
Azure AD, RBAC, Policy, Secure vWAN, hybrid AD design proof of concepts/labs/demos using Terraform, Python
- Host: GitHub
- URL: https://github.com/jksprattler/azure-security
- Owner: jksprattler
- Created: 2022-08-28T01:19:06.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2023-10-11T20:50:47.000Z (over 1 year ago)
- Last Synced: 2025-03-30T02:33:28.480Z (about 1 month ago)
- Topics: azure, azure-security, azuread, terraform
- Language: HCL
- Homepage:
- Size: 172 KB
- Stars: 7
- Watchers: 1
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
## Contents
- `/azure-dev-infra` contains terraform artifacts for general infrastructure related to dev deployments associated with directories within this repo.
- `/azuread-users-groups-roles` contains the terraform artifacts for implementing Azure AD Users, Groups (dynamic) and Roles allowing you to implement Identity Governance using IAM as code. Link to runbook instructions [here](https://jksprattler.github.io/jennas-runbooks/Azure/azure-tf-ad-rbac.html) which includes a YouTube demo of the implementation.
- `/azuread-users-groups-roles-pt2` is a revisit of the previous runbook for implementing Azure AD Users, Groups and Roles by following this [HashCorp](https://developer.hashicorp.com/terraform/tutorials/azure/azure-ad) doc which utilizes a for_each loop through a list of users in a csv file. Also included are steps to create the GH Actions SPN using Terraform and further limiting privileges by allowing only Read access across the subscription rather than Owner. The SPN API permissions are also now managed via Terraform. Link to runbook instructions [here](https://jksprattler.github.io/jennas-runbooks/Azure/bazure-tf-ad-rbac-pt2.html) which includes a YouTube demo of the implementation.