Azure Compute Disk Encryption Set

azurerm_disk_encryption_set (Terraform)

The Disk Encryption Set in Compute can be configured in Terraform with the resource name azurerm_disk_encryption_set. The following sections describe 10 examples of how to use the resource and its parameters.

Example Usage from GitHub

mikamakusa/terraform

resource "azurerm_disk_encryption_set" "disk_encryption_set" {
  count               = length(var.disk_encryption_set)
  name                = lookup(var.disk_encryption_set[count.index], "name")
  resource_group_name = element(var.resource_group_name, lookup(var.disk_encryption_set[count.index], "resource_group_id"))
  location            = element(var.location, lookup(var.disk_encryption_set[count.index], "location_id"))
  key_vault_key_id    = element(var.key_vault_key_id, lookup(var.disk_encryption_set[count.index], "key_vault_key_id"))

anmoltoppo/Terraform

resource "azurerm_disk_encryption_set" "encryption_set" {
  name                = var.settings.name
  resource_group_name = var.resource_groups[var.settings.resource_group_key].name
  location            = lookup(var.settings, "region", null) == null ? var.resource_groups[var.settings.resource_group_key].location : var.global_settings.regions[var.settings.region]
  key_vault_key_id    = var.key_vault_key_ids[var.settings.key_vault_key_key].id

VentsislavDinev/en_sample

resource "azurerm_disk_encryption_set" "example" {
  name                = var.name
  resource_group_name = module.resource_group.azurerm_resource_group.example.name
  location            = module.resource_group.azurerm_resource_group.example.location
  key_vault_key_id    = module.key_vault_key.azurerm_key_vault_key.example.example.id

denniszielke/terraform_lab

resource "azurerm_disk_encryption_set" "des" {
  name                        = "des"
  location                    = azurerm_resource_group.rg.location
  resource_group_name         = azurerm_resource_group.rg.name
  key_vault_key_id            = azurerm_key_vault_key.encryption_key.id

aztfmod/terraform-azurerm-caf

resource "azurerm_disk_encryption_set" "encryption_set" {
  name                = var.settings.name
  resource_group_name = var.resource_groups[var.settings.resource_group_key].name
  location            = lookup(var.settings, "region", null) == null ? var.resource_groups[var.settings.resource_group_key].location : var.global_settings.regions[var.settings.region]
  key_vault_key_id    = var.key_vault_key_ids[var.settings.key_vault_key_key].id

pkhuntia/aztfmod

resource "azurerm_disk_encryption_set" "encryption_set" {
  name                = var.settings.name
  resource_group_name = var.resource_groups[var.settings.resource_group_key].name
  location            = lookup(var.settings, "region", null) == null ? var.resource_groups[var.settings.resource_group_key].location : var.global_settings.regions[var.settings.region]
  key_vault_key_id    = var.key_vault_key_ids[var.settings.key_vault_key_key].id

niveklabs/azurerm

resource "azurerm_disk_encryption_set" "this" {
  key_vault_key_id    = var.key_vault_key_id
  location            = var.location
  name                = var.name
  resource_group_name = var.resource_group_name
  tags                = var.tags

aatkinsmsft/private-aks-deployment

resource "azurerm_disk_encryption_set" "des" {
    name                = var.des_name
    resource_group_name = var.resource_group_name
    location            = var.location
    key_vault_key_id    = azurerm_key_vault_key.des_key.id

gthb-abhishek/private-aks-cluster-GinSiuCheng

resource "azurerm_disk_encryption_set" "des" {
    name                = var.des_name
    resource_group_name = var.resource_group_name
    location            = var.location
    key_vault_key_id    = azurerm_key_vault_key.des_key.id

skamalj/azure_terraform

resource "azurerm_disk_encryption_set" "des" {
  name                = var.des_name
  resource_group_name = var.resource_group_name
  location            = var.location
  key_vault_key_id    = data.azurerm_key_vault_key.kek.id
  tags                = var.tags

Parameters

• id optional computed - string
• key_vault_key_id required - string
• location required - string
• name required - string
• resource_group_name required - string
• tags optional - map from string to string
• identity list block
  • principal_id optional computed - string
  • tenant_id optional computed - string
  • type required - string
• timeouts single block
  • create optional - string
  • delete optional - string
  • read optional - string
  • update optional - string

Explanation in Terraform Registry

Manages a Disk Encryption Set.

Tips: Best Practices for The Other Azure Compute Resources

In addition to the azurerm_linux_virtual_machine, Azure Compute has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

azurerm_linux_virtual_machine

Ensure to use SSH authentication for virtual machines

It is better to use SSH authentication for virtual machines instead of password authentication to enforce more secure ways.

azurerm_managed_disk

Ensure to enable the encryption on managed disks

It is better to enable the encryption on managed disks.

azurerm_virtual_machine

Ensure to use SSH authentication for virtual machines

It is better to use SSH authentication for virtual machines instead of password authentication to enforce more secure ways.