terraform-azurerm-scc-workload-management

Azure workload management resources module. Creates Recovery Services Vaults, Key Vaults, and maintenance configurations using AVM modules.

Usage

module "workload_management" {
  source = "git::https://github.com/TysonTech-net/terraform-azurerm-scc-workload-management.git?ref=v1.0.0"

  location         = "uksouth"
  tags             = var.tags
  enable_telemetry = true

  deploy_management_backup_recovery_services_vault = true
  deploy_management_key_vault                      = true
}

Features

• Backup Recovery Services Vault (AVM) with caller-supplied backup policies
• Site Recovery RSV for BCDR
• Key Vault (AVM) with RBAC, private endpoints, diagnostics
• Azure Update Manager maintenance configurations

VM Backup Policies

This module is naming-agnostic: whatever is passed to management_backup_rsv_vm_backup_policy is deployed into the vault as-is. SCC standard tier definitions (SCC-BasicRetention, SCC-StandardRetention, SCC-ExtendedRetention) and CAF-style auto-generated names live in the consuming module (scc-workload-resources v1.4.0+), which has access to the naming convention inputs (workload, env, instance).

Customers using this module directly (not via scc-workload-resources) should supply their own management_backup_rsv_vm_backup_policy map with any naming convention they prefer.

Requirements

Name	Version
terraform	>= 1.3
azurerm	~> 4.0
azapi	~> 2.0