Experiment with Terraform managed lock

frasermolyneux · Dec 9, 2023 · 6b6b57e · 6b6b57e
1 parent 83c91fc
commit 6b6b57e
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/terraform/common.tf b/terraform/common.tf
@@ -4,3 +4,10 @@ resource "azurerm_resource_group" "rg" {
 
   tags = var.tags
 }
+
+resource "azurerm_management_lock" "rg_lock" {
+  name       = "Terraform Lock - ${random_id.lock.hex}"
+  scope      = azurerm_resource_group.rg.id
+  lock_level = "ReadOnly"
+  notes      = "Lock managed by Terraform to prevent manual change or accidental deletion of the resource group or resources"
+}
diff --git a/terraform/main.tf b/terraform/main.tf
@@ -33,3 +33,10 @@ resource "random_id" "environment_id" {
 resource "time_rotating" "thirty_days" {
   rotation_days = 30
 }
+
+resource "random_id" "lock" {
+  keepers = {
+    id = "${timestamp()}"
+  }
+  byte_length = 8
+}