diff --git a/examples/onboard-azure-sql-managed-instance/README.md b/examples/onboard-azure-sql-managed-instance/README.md index 6a5abae..559e81a 100644 --- a/examples/onboard-azure-sql-managed-instance/README.md +++ b/examples/onboard-azure-sql-managed-instance/README.md @@ -18,3 +18,41 @@ Storage Containers are used to store transactional data for the Event Hub import Part of the onboarding process involves connecting to your SQL Managed instance and running SQL commands to create an audit policy. This module includes an example for how to connect to the instance from your local machine and create it. **Note:** This example requires the ``sqlcmd`` client to be installed, as well as for the newly created SQL Managed instance to be accessible from your local machine. + + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [http](#provider\_http) | n/a | +| [terraform](#provider\_terraform) | n/a | + +## Modules + +| Name | Source | Version | +|------|--------|---------| +| [onboard-azure-sql-managed-instance-eventhub-1](#module\_onboard-azure-sql-managed-instance-eventhub-1) | ../../modules/onboard-azure-eventhub | n/a | +| [sql-managed-instance-1](#module\_sql-managed-instance-1) | ../../modules/onboard-azure-sql-managed-instance | n/a | + +## Resources + +| Name | Type | +|------|------| +| [terraform_data.configure_database-1](https://registry.terraform.io/providers/hashicorp/terraform/latest/docs/resources/data) | resource | +| [http_http.my-ip](https://registry.terraform.io/providers/hashicorp/http/latest/docs/data-sources/http) | data source | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [dsfhub\_host](#input\_dsfhub\_host) | n/a | `any` | n/a | yes | +| [dsfhub\_token](#input\_dsfhub\_token) | n/a | `any` | n/a | yes | + +## Outputs + +No outputs. + \ No newline at end of file diff --git a/examples/onboard-azure-sql-managed-instance/main.tf b/examples/onboard-azure-sql-managed-instance/main.tf index 50c376c..b64f1ff 100644 --- a/examples/onboard-azure-sql-managed-instance/main.tf +++ b/examples/onboard-azure-sql-managed-instance/main.tf @@ -88,8 +88,8 @@ locals { # Construct public endpoint locals { - fqdn_parsing = regex("([^.]+)(.*)", module.sql-managed-instance-1.azure-ms-sql-managed-instance.fqdn) # Split after instance name - managed_instance_public_endpoint = "${local.fqdn_parsing[0]}.public${local.fqdn_parsing[1]},3342" # Add ".public" and public port + fqdn_parsing = regex("([^.]+)(.*)", module.sql-managed-instance-1.azure-ms-sql-managed-instance.fqdn) # Split after instance name + managed_instance_public_endpoint = "${local.fqdn_parsing[0]}.public${local.fqdn_parsing[1]},3342" # Add ".public" and public port } # Create server audit policy diff --git a/modules/azurerm-mssql-managed-instance/README.md b/modules/azurerm-mssql-managed-instance/README.md index e69de29..6c47c9e 100644 --- a/modules/azurerm-mssql-managed-instance/README.md +++ b/modules/azurerm-mssql-managed-instance/README.md @@ -0,0 +1,44 @@ + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [azurerm](#provider\_azurerm) | n/a | + +## Modules + +No modules. + +## Resources + +| Name | Type | +|------|------| +| [azurerm_mssql_managed_instance.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssql_managed_instance) | resource | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [administrator\_login](#input\_administrator\_login) | The administrator login name for the new SQL Managed Instance. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [administrator\_login\_password](#input\_administrator\_login\_password) | The password associated with the administrator\_login user. Needs to comply with Azure's [Password Policy](https://learn.microsoft.com/en-us/sql/relational-databases/security/password-policy?view=sql-server-ver16&redirectedfrom=MSDN) | `string` | n/a | yes | +| [license\_type](#input\_license\_type) | What type of license the Managed Instance will use. Possible values are LicenseIncluded and BasePrice. Defaults to LicenseIncluded. | `string` | `"LicenseIncluded"` | no | +| [location](#input\_location) | Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [name](#input\_name) | The name of the SQL Managed Instance. This needs to be globally unique within Azure. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [public\_data\_endpoint\_enabled](#input\_public\_data\_endpoint\_enabled) | Is the public data endpoint enabled? Default value is false. | `bool` | `false` | no | +| [resource\_group\_name](#input\_resource\_group\_name) | The name of the resource group in which to create the SQL Managed Instance. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [sku\_name](#input\_sku\_name) | Specifies the SKU Name for the SQL Managed Instance. Valid values include GP\_Gen4, GP\_Gen5, GP\_Gen8IM, GP\_Gen8IH, BC\_Gen4, BC\_Gen5, BC\_Gen8IM or BC\_Gen8IH. Defaults to GP\_Gen5. | `string` | `"GP_Gen5"` | no | +| [storage\_size\_in\_gb](#input\_storage\_size\_in\_gb) | Maximum storage space for the SQL Managed instance. This should be a multiple of 32 (GB). Defaults to 32. | `number` | `32` | no | +| [subnet\_id](#input\_subnet\_id) | The subnet resource id that the SQL Managed Instance will be associated with. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [tags](#input\_tags) | A mapping of tags to assign to the resource. | `map(string)` | `null` | no | +| [vcores](#input\_vcores) | Number of cores that should be assigned to the SQL Managed Instance. Values can be 8, 16, or 24 for Gen4 SKUs, or 4, 6, 8, 10, 12, 16, 20, 24, 32, 40, 48, 56, 64, 80, 96 or 128 for Gen5 SKUs. Defaults to 4. | `number` | `4` | no | + +## Outputs + +| Name | Description | +|------|-------------| +| [this](#output\_this) | Azure SQL Managed Instance. | + \ No newline at end of file diff --git a/modules/azurerm-network-security-group/README.md b/modules/azurerm-network-security-group/README.md index e69de29..fbac1b2 100644 --- a/modules/azurerm-network-security-group/README.md +++ b/modules/azurerm-network-security-group/README.md @@ -0,0 +1,37 @@ + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [azurerm](#provider\_azurerm) | n/a | + +## Modules + +No modules. + +## Resources + +| Name | Type | +|------|------| +| [azurerm_network_security_group.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/network_security_group) | resource | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [location](#input\_location) | Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [name](#input\_name) | Specifies the name of the network security group. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [resource\_group\_name](#input\_resource\_group\_name) | The name of the resource group in which to create the network security group. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [security\_rules](#input\_security\_rules) | List of security\_rule objects representing security rules, see the [azurerm documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/network_security_group#security_rule) for more details. | 
list(
    object(
      {
        access                       = string
        description                  = optional(string)
        destination_address_prefix   = optional(string)
        destination_address_prefixes = optional(list(string))
        destination_port_range       = optional(string)
        destination_port_ranges      = optional(list(string))
        direction                    = string
        name                         = string
        priority                     = number
        protocol                     = string
        source_address_prefix        = optional(string)
        source_address_prefixes      = optional(list(string))
        source_port_range            = optional(string)
        source_port_ranges           = optional(list(string))

      }
    )
  )
| `[]` | no | +| [tags](#input\_tags) | A mapping of tags to assign to the resource. | `map(string)` | `null` | no | + +## Outputs + +| Name | Description | +|------|-------------| +| [this](#output\_this) | Azure Network Security Rule. | + \ No newline at end of file diff --git a/modules/azurerm-route-table/README.md b/modules/azurerm-route-table/README.md index e69de29..1cce752 100644 --- a/modules/azurerm-route-table/README.md +++ b/modules/azurerm-route-table/README.md @@ -0,0 +1,37 @@ + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [azurerm](#provider\_azurerm) | n/a | + +## Modules + +No modules. + +## Resources + +| Name | Type | +|------|------| +| [azurerm_route_table.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/route_table) | resource | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [location](#input\_location) | Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [name](#input\_name) | The name of the route table. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [resource\_group\_name](#input\_resource\_group\_name) | The name of the resource group in which to create the route table. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [route](#input\_route) | A list of route objects. See the [azure documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/route_table) for more details. | 
list(
    object(
      {
        name                   = string
        address_prefix         = string
        next_hop_type          = string
        next_hop_in_ip_address = optional(string)
      }
    )
  )
| `null` | no | +| [tags](#input\_tags) | A mapping of tags to assign to the resource. | `map(string)` | `null` | no | + +## Outputs + +| Name | Description | +|------|-------------| +| [this](#output\_this) | Azure Route Table. | + \ No newline at end of file diff --git a/modules/azurerm-virtual-network/README.md b/modules/azurerm-virtual-network/README.md index e69de29..32dce50 100644 --- a/modules/azurerm-virtual-network/README.md +++ b/modules/azurerm-virtual-network/README.md @@ -0,0 +1,38 @@ + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [azurerm](#provider\_azurerm) | n/a | + +## Modules + +No modules. + +## Resources + +| Name | Type | +|------|------| +| [azurerm_virtual_network.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtual_network) | resource | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [address\_space](#input\_address\_space) | The address space that is used the virtual network. You can supply more than one address space. | `list(string)` | n/a | yes | +| [location](#input\_location) | The location/region where the virtual network is created. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [name](#input\_name) | The name of the virtual network. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [resource\_group\_name](#input\_resource\_group\_name) | The name of the resource group in which to create the virtual network. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [subnets](#input\_subnets) | [
{
address\_prefixes: A list of address prefixes to use for the subnet
default\_outbound\_access\_enabled: (Optional) Enable default outbound access to the internet for the subnet. Defaults to true.
name: The name of the subnet
route\_table\_id: (Optional) The ID of the Route Table that should be associated with this subnet.
security\_group: (Optional) he Network Security Group to associate with the subnet. (Referenced by id, ie. azurerm\_network\_security\_group.example.id)

deletegation: (Optional) One or more delegation blocks as defined below.
}
]

delegation: {
name: A name for this delegation.
service\_delegation: A service\_delegation block as defined below.
}

service\_delegation: {
name: The name of service to delegate to.
actions: (Optional) A list of Actions which should be delegated. This list is specific to the service to delegate to.
} | 
list(
    object(
      {
        address_prefixes                = list(string),
        default_outbound_access_enabled = optional(bool, true)
        name                            = string
        route_table_id                  = optional(string)
        security_group                  = optional(string)

        delegation = optional(list(
          object(
            {
              name = string

              service_delegation = optional(list(
                object(
                  {
                    name    = string
                    actions = optional(list(string))
                  }
                )
              ))
            }
          )
        ))
      }
    )
  )
| `null` | no | +| [tags](#input\_tags) | A mapping of tags to assign to the resource. | `map(string)` | `null` | no | + +## Outputs + +| Name | Description | +|------|-------------| +| [this](#output\_this) | Azure Virtual Network. | + \ No newline at end of file diff --git a/modules/dsfhub-azure-sql-managed-instance/README.md b/modules/dsfhub-azure-sql-managed-instance/README.md index e69de29..db5fbcb 100644 --- a/modules/dsfhub-azure-sql-managed-instance/README.md +++ b/modules/dsfhub-azure-sql-managed-instance/README.md @@ -0,0 +1,47 @@ + +## Requirements + +No requirements. + +## Providers + +| Name | Version | +|------|---------| +| [dsfhub](#provider\_dsfhub) | n/a | + +## Modules + +No modules. + +## Resources + +| Name | Type | +|------|------| +| [dsfhub_data_source.this](https://registry.terraform.io/providers/imperva/dsfhub/latest/docs/resources/data_source) | resource | + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [admin\_email](#input\_admin\_email) | The email address to notify about the asset. | `string` | n/a | yes | +| [asset\_display\_name](#input\_asset\_display\_name) | User-friendly name of the asset, defined by user | `string` | n/a | yes | +| [asset\_id](#input\_asset\_id) | The Azure resource ID of the SQL Managed instance. | `string` | n/a | yes | +| [audit\_pull\_enabled](#input\_audit\_pull\_enabled) | If true, sonargateway will collect the audit logs for this system if it can. | `bool` | `false` | no | +| [auth\_mechanism](#input\_auth\_mechanism) | Specifies the auth mechanism used by the connection | `string` | `null` | no | +| [database\_name](#input\_database\_name) | Specifies the name of the database to connect to (or default DB). | `string` | `"master"` | no | +| [gateway\_id](#input\_gateway\_id) | Unique identifier (UID) attached to the jSonar machine controlling the asset | `string` | n/a | yes | +| [location](#input\_location) | Physical location/region of the SQL Managed instance, e.g. "EAST US" | `string` | `null` | no | +| [logs\_destination\_asset\_id](#input\_logs\_destination\_asset\_id) | The asset\_id of the AZURE EVENTHUB asset that this instance is sending its audit logs to. | `string` | `null` | no | +| [parent\_asset\_id](#input\_parent\_asset\_id) | The asset\_id of the AZURE asset representing the Azure account where this server is located. | `string` | `null` | no | +| [password](#input\_password) | Password to use to connect to the SQL Managed instance. | `string` | `null` | no | +| [reason](#input\_reason) | Used to differentiate connections that belong to the same asset | `string` | `"default"` | no | +| [server\_host\_name](#input\_server\_host\_name) | Hostname of the SQL Managed instance. | `string` | n/a | yes | +| [server\_ip](#input\_server\_ip) | IP address / hostname of the SQL Managed instance. | `string` | n/a | yes | +| [username](#input\_username) | Username of SQL database user to connect with. | `string` | `null` | no | + +## Outputs + +| Name | Description | +|------|-------------| +| [this](#output\_this) | AZURE SQL MANAGED INSTANCE asset. | + \ No newline at end of file diff --git a/modules/onboard-azure-sql-managed-instance/README.md b/modules/onboard-azure-sql-managed-instance/README.md index d8b6cac..814b50f 100644 --- a/modules/onboard-azure-sql-managed-instance/README.md +++ b/modules/onboard-azure-sql-managed-instance/README.md @@ -11,3 +11,76 @@ There are two prerequisites for using this module: The first two can be created along with an AZURE EVENTHUB asset via the ``onboard-azure-eventhub`` module. See the corresponding example for more details. + + +## Requirements + +No requirements. + +## Providers + +No providers. + +## Modules + +| Name | Source | Version | +|------|--------|---------| +| [azure-ms-sql-managed-instance](#module\_azure-ms-sql-managed-instance) | ../azurerm-mssql-managed-instance | n/a | +| [azure-sql-managed-instance-asset](#module\_azure-sql-managed-instance-asset) | ../dsfhub-azure-sql-managed-instance | n/a | +| [diagnostic-setting](#module\_diagnostic-setting) | ../azurerm-monitor-diagnostic-setting | n/a | +| [route-table](#module\_route-table) | ../azurerm-route-table | n/a | +| [security-group](#module\_security-group) | ../azurerm-network-security-group | n/a | +| [virtual-network](#module\_virtual-network) | ../azurerm-virtual-network | n/a | + +## Resources + +No resources. + +## Inputs + +| Name | Description | Type | Default | Required | +|------|-------------|------|---------|:--------:| +| [azure\_sql\_managed\_instance\_admin\_email](#input\_azure\_sql\_managed\_instance\_admin\_email) | The email address to notify about the asset. | `string` | n/a | yes | +| [azure\_sql\_managed\_instance\_audit\_pull\_enabled](#input\_azure\_sql\_managed\_instance\_audit\_pull\_enabled) | If true, sonargateway will collect the audit logs for this system if it can. | `bool` | `false` | no | +| [azure\_sql\_managed\_instance\_auth\_mechanism](#input\_azure\_sql\_managed\_instance\_auth\_mechanism) | Specifies the auth mechanism used by the connection | `string` | `null` | no | +| [azure\_sql\_managed\_instance\_database\_name](#input\_azure\_sql\_managed\_instance\_database\_name) | Specifies the name of the database to connect to (or default DB). | `string` | `"master"` | no | +| [azure\_sql\_managed\_instance\_gateway\_id](#input\_azure\_sql\_managed\_instance\_gateway\_id) | Unique identifier (UID) attached to the jSonar machine controlling the asset | `string` | n/a | yes | +| [azure\_sql\_managed\_instance\_location](#input\_azure\_sql\_managed\_instance\_location) | Physical location/region of the SQL Managed instance, e.g. "EAST US" | `string` | `null` | no | +| [azure\_sql\_managed\_instance\_logs\_destination\_asset\_id](#input\_azure\_sql\_managed\_instance\_logs\_destination\_asset\_id) | The asset\_id of the AZURE EVENTHUB asset that this instance is sending its audit logs to. | `string` | `null` | no | +| [azure\_sql\_managed\_instance\_parent\_asset\_id](#input\_azure\_sql\_managed\_instance\_parent\_asset\_id) | The asset\_id of the AZURE asset representing the Azure account where this server is located. | `string` | `null` | no | +| [azure\_sql\_managed\_instance\_password](#input\_azure\_sql\_managed\_instance\_password) | Password to use to connect to the SQL Managed instance. | `string` | `null` | no | +| [azure\_sql\_managed\_instance\_reason](#input\_azure\_sql\_managed\_instance\_reason) | Used to differentiate connections that belong to the same asset | `string` | `"default"` | no | +| [azure\_sql\_managed\_instance\_username](#input\_azure\_sql\_managed\_instance\_username) | Username of SQL database user to connect with. | `string` | `null` | no | +| [diagnostic\_setting\_eventhub\_authorization\_rule\_id](#input\_diagnostic\_setting\_eventhub\_authorization\_rule\_id) | Specifies the ID of an Event Hub Namespace Authorization Rule used to send Diagnostics Data. | `string` | `null` | no | +| [diagnostic\_setting\_eventhub\_name](#input\_diagnostic\_setting\_eventhub\_name) | Specifies the name of the Event Hub where Diagnostics Data should be sent. | `string` | `null` | no | +| [diagnostic\_setting\_name](#input\_diagnostic\_setting\_name) | Specifies the name of the Diagnostic Setting. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [managed\_instance\_administrator\_login](#input\_managed\_instance\_administrator\_login) | The administrator login name for the new SQL Managed Instance. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [managed\_instance\_administrator\_login\_password](#input\_managed\_instance\_administrator\_login\_password) | The password associated with the administrator\_login user. Needs to comply with Azure's [Password Policy](https://learn.microsoft.com/en-us/sql/relational-databases/security/password-policy?view=sql-server-ver16&redirectedfrom=MSDN) | `string` | n/a | yes | +| [managed\_instance\_license\_type](#input\_managed\_instance\_license\_type) | What type of license the Managed Instance will use. Possible values are LicenseIncluded and BasePrice. Defaults to LicenseIncluded. | `string` | `"LicenseIncluded"` | no | +| [managed\_instance\_location](#input\_managed\_instance\_location) | Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [managed\_instance\_name](#input\_managed\_instance\_name) | The name of the SQL Managed Instance. This needs to be globally unique within Azure. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [managed\_instance\_public\_data\_endpoint\_enabled](#input\_managed\_instance\_public\_data\_endpoint\_enabled) | Is the public data endpoint enabled? Default value is false. | `bool` | `false` | no | +| [managed\_instance\_resource\_group\_name](#input\_managed\_instance\_resource\_group\_name) | The name of the resource group in which to create the SQL Managed Instance. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [managed\_instance\_sku\_name](#input\_managed\_instance\_sku\_name) | Specifies the SKU Name for the SQL Managed Instance. Valid values include GP\_Gen4, GP\_Gen5, GP\_Gen8IM, GP\_Gen8IH, BC\_Gen4, BC\_Gen5, BC\_Gen8IM or BC\_Gen8IH. Defaults to GP\_Gen5. | `string` | `"GP_Gen5"` | no | +| [managed\_instance\_storage\_size\_in\_gb](#input\_managed\_instance\_storage\_size\_in\_gb) | Maximum storage space for the SQL Managed instance. This should be a multiple of 32 (GB). Defaults to 32. | `number` | `32` | no | +| [managed\_instance\_tags](#input\_managed\_instance\_tags) | A mapping of tags to assign to the resource. | `map(string)` | `null` | no | +| [managed\_instance\_vcores](#input\_managed\_instance\_vcores) | Number of cores that should be assigned to the SQL Managed Instance. Values can be 8, 16, or 24 for Gen4 SKUs, or 4, 6, 8, 10, 12, 16, 20, 24, 32, 40, 48, 56, 64, 80, 96 or 128 for Gen5 SKUs. Defaults to 4. | `number` | `4` | no | +| [route\_table\_resource\_group\_name](#input\_route\_table\_resource\_group\_name) | The name of the resource group in which to create the network route table. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [security\_group\_resource\_group\_name](#input\_security\_group\_resource\_group\_name) | The name of the resource group in which to create the network security group. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [security\_group\_security\_rules](#input\_security\_group\_security\_rules) | List of security\_rule objects representing security rules, see the [azurerm documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/network_security_group#security_rule) for more details. These will be applied in addition to the default security rule settings for Managed Instances. | 
list(
    object(
      {
        access                       = string
        description                  = optional(string)
        destination_address_prefix   = optional(string)
        destination_address_prefixes = optional(list(string))
        destination_port_range       = optional(string)
        destination_port_ranges      = optional(list(string))
        direction                    = string
        name                         = string
        priority                     = number
        protocol                     = string
        source_address_prefix        = optional(string)
        source_address_prefixes      = optional(list(string))
        source_port_range            = optional(string)
        source_port_ranges           = optional(list(string))

      }
    )
  )
| `[]` | no | +| [security\_group\_tags](#input\_security\_group\_tags) | A mapping of tags to assign to the resource. | `map(string)` | `null` | no | +| [virtual\_network\_resource\_group\_name](#input\_virtual\_network\_resource\_group\_name) | The name of the resource group in which to create the virtual network. Changing this forces a new resource to be created. | `string` | n/a | yes | +| [virtual\_network\_tags](#input\_virtual\_network\_tags) | A mapping of tags to assign to the resource. | `map(string)` | `null` | no | + +## Outputs + +| Name | Description | +|------|-------------| +| [azure-ms-sql-managed-instance](#output\_azure-ms-sql-managed-instance) | Microsoft SQL Azure Managed Instance. | +| [azure-sql-managed-instance-asset](#output\_azure-sql-managed-instance-asset) | AZURE SQL MANAGED INSTANCE asseet. | +| [default-managed-instance-security-rules](#output\_default-managed-instance-security-rules) | Security rules required for Managed Instances by default. | +| [diagnostic-setting](#output\_diagnostic-setting) | Diagnostic Setting. | +| [route-table](#output\_route-table) | Azure Managed Instance Route Table. | +| [security-group](#output\_security-group) | Azure Network Security Group. | +| [virtual-network](#output\_virtual-network) | Azure Managed Instance Virtual Network. | + \ No newline at end of file