disk encryption set

src/azure.go

@@ -74,6 +74,7 @@ func GetAZUREResourcePermissions(result ResourceV2) ([]string, error) {
 		"azurerm_security_center_workspace":            azurermSecurityCenterWorkspace,
 		"azurerm_log_analytics_solution":               azurermLogAnalyticsSolution,
 		"azurerm_role_assignment":                      azurermRoleAssignment,
+		"azurerm_disk_encryption_set":                  azurermDiskEncryptionSet,
 	}
 
 	var Permissions []string

src/files_azure.go

@@ -132,3 +132,6 @@ var azurermLogAnalyticsSolution []byte
 
 //go:embed mapping/azurerm/resource/authorization/azurerm_role_assignment.json
 var azurermRoleAssignment []byte
+
+//go:embed mapping/azurerm/resource/compute/azurerm_disk_encryption_set.json
+var azurermDiskEncryptionSet []byte

src/mapping/azurerm/resource/compute/azurerm_disk_encryption_set.json

@@ -0,0 +1,18 @@
+[
+  {
+    "apply": [
+      "Microsoft.Compute/diskEncryptionSets/write",
+      "Microsoft.Compute/diskEncryptionSets/delete",
+      "Microsoft.Compute/diskEncryptionSets/read",
+      "Microsoft.KeyVault/vaults/read"
+    ],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [
+      "Microsoft.Compute/diskEncryptionSets/delete"
+    ],
+    "modify": [],
+    "plan": []
+  }
+]

terraform/azurerm/backup/azurerm_disk_encryption_set.tf

@@ -0,0 +1,16 @@
+resource "azurerm_disk_encryption_set" "pike" {
+  name                = "pike"
+  resource_group_name = "pike"
+  location            = "uksouth"
+  key_vault_key_id    = data.azurerm_key_vault_key.pike.id
+
+  identity {
+    type = "SystemAssigned"
+  }
+}
+
+data "azurerm_key_vault_key" "pike" {
+
+  key_vault_id = "/subscriptions/037ce662-dfc1-4b8b-a8a7-6c414b540ed6/resourceGroups/pike/providers/Microsoft.KeyVault/vaults/pike"
+  name         = "pike"
+}

terraform/azurerm/role/azurerm_role_definition.tf

@@ -5,17 +5,10 @@ resource "azurerm_role_definition" "example" {
 
   permissions {
     actions = [
-      #analytics
-      "Microsoft.OperationsManagement/solutions/read",
-      "Microsoft.OperationsManagement/solutions/write",
-      "Microsoft.OperationsManagement/solutions/delete",
-
-      "Microsoft.Resources/subscriptions/providers/read",
-
-      #role
-      "Microsoft.Authorization/roleAssignments/read",
-      "Microsoft.Authorization/roleAssignments/write",
-      "Microsoft.Authorization/roleAssignments/delete"
+      "Microsoft.Compute/diskEncryptionSets/write",
+      "Microsoft.Compute/diskEncryptionSets/delete",
+      "Microsoft.Compute/diskEncryptionSets/read",
+      "Microsoft.KeyVault/vaults/read"
     ]
     not_actions = []
   }

todo_azure.md

@@ -1,5 +1,7 @@
 # todo
 
+./resource.ps1 azurerm_kubernetes_cluster
+./resource.ps1 azurerm_kusto_server
 ./resource.ps1 azurerm_mssql_database
 ./resource.ps1 azurerm_mssql_database_extended_auditing_policy
 ./resource.ps1 azurerm_mssql_database_vulnerability_assessment_rule_baseline
@@ -16,26 +18,23 @@
 ./resource.ps1 azurerm_mssql_managed_instance_transparent_data_encryption
 ./resource.ps1 azurerm_mssql_managed_instance_vulnerability_assessment
 ./resource.ps1 azurerm_mssql_outbound_firewall_rule
-./resource.ps1 azurerm_mssql_server_dns_alias
 ./resource.ps1 azurerm_mssql_server
+./resource.ps1 azurerm_mssql_server_dns_alias
 ./resource.ps1 azurerm_mssql_server_microsoft_support_auditing_policy
 ./resource.ps1 azurerm_mssql_server_security_alert_policy
 ./resource.ps1 azurerm_mssql_server_transparent_data_encryption
 ./resource.ps1 azurerm_mssql_server_vulnerability_assessment
 ./resource.ps1 azurerm_mssql_virtual_machine
 ./resource.ps1 azurerm_mssql_virtual_network_rule
 ./resource.ps1 azurerm_mysql_database
-./resource.ps1 azurerm_mysql_server
 ./resource.ps1 azurerm_mysql_flexible_server
+./resource.ps1 azurerm_mysql_server
 ./resource.ps1 azurerm_postgresql_database
 ./resource.ps1 azurerm_postgresql_server
-./resource.ps1 azurerm_sql_active_directory_administrator
-./resource.ps1 azurerm_sql_database
-./resource.ps1 azurerm_sql_server
-./resource.ps1 azurerm_kusto_server
-azurerm_disk_encryption_set
-azurerm_kubernetes_cluster
 ./resource.ps1 azurerm_security_center_auto_provisioning
 ./resource.ps1 azurerm_security_center_automation
 ./resource.ps1 azurerm_security_center_subscription_pricing
+./resource.ps1 azurerm_sql_active_directory_administrator
+./resource.ps1 azurerm_sql_database
+./resource.ps1 azurerm_sql_server
 ./resource.ps1 azurerm_subscription_policy_assignment