slawek/terraform-azurerm-storage-account
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enhance Azure Storage Account module with additional variables and blob data protection features

Browse Source
This commit is contained in:
Sławek Koszewski
2026-02-28 22:10:38 +01:00
parent aa63e41b55
commit 0c86d10d4d
3 changed files with 143 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
README.md
View File

@@ -6,12 +6,30 @@ This module creates an Azure Storage Account with the specified name, resource g
- `rg_name`: The name of the resource group where the storage account will be created.
- `location`: The Azure region where the storage account will be created.
- `storage_account_base_name`: A base name for the storage account. If `storage_account_name` is not provided, the module will generate a unique name using this base name and a hash of the subscription ID, resource group name, and base name.
- `storage_account_name`: The name of the storage account. If not provided, it will be generated based on the `storage_account_base_name`.
- `base_name`: Optional base name used to generate a unique storage account name when `name` is not set.
- `name`: Optional explicit storage account name. If omitted, the module generates a deterministic name from `base_name`.
- `account_tier`: Storage account performance tier.
- `account_replication_type`: Storage account replication strategy.
- `allow_nested_items_to_be_public`: Controls whether nested blobs/containers can be public.
- `public_network_access_enabled`: Enables or disables public network access.
- `tags`: Tags to apply to the storage account.
- `containers`: A map of storage containers to be created within the storage account. Each container is defined as an object with the following properties:
- `name`: The name of the storage container.
- `container_access_type`: The access level of the container (e.g., "private", "blob", "container").
### Blob Data Protection Inputs
- `enable_blob_soft_delete` (optional, default `false`): Enables blob soft delete (`delete_retention_policy`) to recover deleted blobs/snapshots within a retention window.
- `blob_soft_delete_retention_days` (optional, default `null`): Retention days for blob soft delete. When `null`, provider default is used.
- `enable_container_soft_delete` (optional, default `false`): Enables container soft delete (`container_delete_retention_policy`) to recover deleted containers.
- `container_soft_delete_retention_days` (optional, default `null`): Retention days for container soft delete. When `null`, provider default is used.
- `enable_blob_versioning` (optional, default `false`): Stores previous blob versions so changes can be rolled back.
- `enable_blob_change_feed` (optional, default `false`): Records ordered blob change events for audit, replay, and recovery workflows.
- `enable_point_in_time_restore_for_containers` (optional, default `false`): Enables point-in-time restore (`restore_policy`) for blob data to recover state from a chosen point in time.
- `point_in_time_restore_days` (optional, default `null`): Restore window in days. Required only when point-in-time restore is enabled.
Point-in-time restore requires `enable_blob_soft_delete = true`, `enable_blob_versioning = true`, and `enable_blob_change_feed = true`.
## Outputs
- `storage_account_id`: The ID of the created storage account.