如何在 terraform 中跨多个资源启用“azurerm_security_center_subscription_pricing”

Question

我正在尝试通过 TF 资源管理安全中心，但是遇到了错误。

这是代码的样子：

resource "azurerm_security_center_subscription_pricing" "example" {
  count         = var.enabled && var.subscription_pricing_enabled ? 1 : 0
  tier          = var.tier
  resource_type = "VirtualMachines, AppServices, ContainerRegistry, KeyVaults, KubernetesService, SqlServers, SqlServerVirtualMachines, StorageAccounts, Arm, Dns"

================================================ ================================================ =====

Error: [0m[0m[1mexpected resource_type to be one of [AppServices ContainerRegistry KeyVaults KubernetesService SqlServers SqlServerVirtualMachines StorageAccounts VirtualMachines], got VirtualMachines, AppServices, ContainerRegistry, KeyVaults, KubernetesService, SqlServers, SqlServerVirtualMachines, StorageAccounts, Arm, Dns[0m
2021-04-03T07:20:07.7838074Z 
2021-04-03T07:20:07.7838690Z [0m  on primary_azure_defender.tf line 54, in resource "azurerm_security_center_subscription_pricing" "example":
2021-04-03T07:20:07.7839390Z   54: resource "azurerm_security_center_subscription_pricing" "example" [4m{[0

非常感谢对此的任何帮助。

文档没有提供有关此用法的详细信息： https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/security_center_subscription_pricing

Answer 1

您只需为resource_type提供一个值，例如：

resource "azurerm_security_center_subscription_pricing" "example" {
  count         = var.enabled && var.subscription_pricing_enabled ? 1 : 0
  tier          = var.tier
  resource_type = "VirtualMachines"

可能的值列在文档和您的错误消息中。

Answer 2

在 main.tf 中：

resource "azurerm_security_center_subscription_pricing" "tier" {
  tier          = "Standard"
  for_each      = toset(var.security_center_resource_types)
  resource_type = each.value
}

在 Variables.tf 中：

variable security_center_resource_types {
  description = "List of security center resource types to configure"
  type        = list(string)
  default = [
"VirtualMachines",
"AppServices",
"KeyVaults",
"SqlServers",
"SqlServerVirtualMachines",
"StorageAccounts",
"Arm",
"Dns",
"Containers",
"OpenSourceRelationalDatabases"

] }