resource lock added in resource

clouddrove · Feb 15, 2023 · 94f38d9 · 94f38d9
1 parent c4c69b7
commit 94f38d9
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 0 deletions.
diff --git a/_example/example.tf b/_example/example.tf
@@ -10,4 +10,8 @@ module "resource_group" {
 
   name     = "example"
   location = "North Europe"
+
+  #resource lock
+  resource_lock_enabled = true
+  lock_level = "CanNotDelete"
 }
diff --git a/main.tf b/main.tf
@@ -30,3 +30,11 @@ resource "azurerm_resource_group" "default" {
     delete = var.delete
   }
 }
+
+resource "azurerm_management_lock" "resource-group-level" {
+  count      = var.enabled && var.resource_lock_enabled ? 1 : 0
+  name       = format("%s-rg-lock", var.lock_level)
+  scope      = azurerm_resource_group.default.*.id[0]
+  lock_level = var.lock_level
+  notes      = "This Resource Group is locked by terrafrom"
+}
diff --git a/variables.tf b/variables.tf
@@ -98,3 +98,14 @@ variable "delete" {
   default     = "90m"
   description = "Used when deleting the Resource Group."
 }
+
+variable "resource_lock_enabled" {
+  type = bool
+  default = false 
+  description = "enable or disable lock resource"
+}
+
+variable "lock_level" {
+  type = string
+  default = "CanNotDelete"
+}