Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for isLocalUserEnabled parameter in azurerm_storage_account #24797

Closed
1 task done
BadJanitor opened this issue Feb 6, 2024 · 2 comments · Fixed by #24800
Closed
1 task done

Support for isLocalUserEnabled parameter in azurerm_storage_account #24797

BadJanitor opened this issue Feb 6, 2024 · 2 comments · Fixed by #24800

Comments

@BadJanitor
Copy link

BadJanitor commented Feb 6, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Community Note

  • Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
  • Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Description

It would be nice to be able to set the isLocalUserEnabled property on an Azure storage account using Terraform. This is currently possible through ARM and Bicep.

In our use case, disabling local users is a security requirement for the policies in Microsoft's FSI governance framework, and I'm sure it is in other sectors as well.

Using AzAPI to set this property is possible, but doesn't help our situation because the storage account needs to be created first, and the policy prevents successful storage account deployment unless the property is set.

New or Affected Resource(s)/Data Source(s)

azurerm_storage_account

Potential Terraform Configuration

resource "azurerm_storage_account" "example" {
  name                            = "storageaccountname"
  resource_group_name             = azurerm_resource_group.example.name
  location                        = azurerm_resource_group.example.location
  account_tier                    = "Standard"
  account_replication_type        = "LRS"
  is_local_user_enabled           = false

  tags = {
    environment = "staging"
  }
}

References

No response

@rcskosir
Copy link
Contributor

rcskosir commented Feb 6, 2024

Thank you for taking the time to open this feature request!

Copy link

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Apr 25, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants