diff --git a/terraform/common.tf b/terraform/common.tf index 7fbc6fb..afd2899 100644 --- a/terraform/common.tf +++ b/terraform/common.tf @@ -4,3 +4,10 @@ resource "azurerm_resource_group" "rg" { tags = var.tags } + +resource "azurerm_management_lock" "rg_lock" { + name = "Terraform Lock - ${random_id.lock.hex}" + scope = azurerm_resource_group.rg.id + lock_level = "ReadOnly" + notes = "Lock managed by Terraform to prevent manual change or accidental deletion of the resource group or resources" +} diff --git a/terraform/main.tf b/terraform/main.tf index bb21ad5..8291fdb 100644 --- a/terraform/main.tf +++ b/terraform/main.tf @@ -33,3 +33,10 @@ resource "random_id" "environment_id" { resource "time_rotating" "thirty_days" { rotation_days = 30 } + +resource "random_id" "lock" { + keepers = { + id = "${timestamp()}" + } + byte_length = 8 +}