support for attaching to AMPLS (#80)

* connect to existing AMPLS

* post pr-check update

README.md

@@ -12,6 +12,8 @@ The following requirements are needed by this module:
 
 - <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) (~> 1.5)
 
+- <a name="requirement_azapi"></a> [azapi](#requirement\_azapi) (~> 1.14)
+
 - <a name="requirement_azurerm"></a> [azurerm](#requirement\_azurerm) (~> 3.71)
 
 - <a name="requirement_modtm"></a> [modtm](#requirement\_modtm) (~> 0.3)
@@ -22,6 +24,7 @@ The following requirements are needed by this module:
 
 The following resources are used by this module:
 
+- [azapi_resource.ampls](https://registry.terraform.io/providers/Azure/azapi/latest/docs/resources/resource) (resource)
 - [azurerm_log_analytics_workspace.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/log_analytics_workspace) (resource)
 - [azurerm_management_lock.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/management_lock) (resource)
 - [azurerm_monitor_diagnostic_setting.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitor_diagnostic_setting) (resource)
@@ -293,6 +296,22 @@ Type: `string`
 
 Default: `"PrivateOnly"`
 
+### <a name="input_monitor_private_link_scoped_resource"></a> [monitor\_private\_link\_scoped\_resource](#input\_monitor\_private\_link\_scoped\_resource)
+
+Description:  - `name` - Defaults to the name of the Log Analytics Workspace.
+ - `resource_id` - Resource ID of an existing Monitor Private Link Scope to connect to.
+
+Type:
+
+```hcl
+map(object({
+    name        = optional(string)
+    resource_id = string
+  }))
+```
+
+Default: `{}`
+
 ### <a name="input_monitor_private_link_scoped_service_name"></a> [monitor\_private\_link\_scoped\_service\_name](#input\_monitor\_private\_link\_scoped\_service\_name)
 
 Description: (Required) The name of the Azure Monitor Private Link Scoped Service. Changing this forces a new resource to be created.

main.ampls_connect.tf

@@ -0,0 +1,13 @@
+resource "azapi_resource" "ampls" {
+  for_each = var.monitor_private_link_scoped_resource
+
+  type = "Microsoft.Insights/privateLinkScopes/scopedResources@2021-07-01-preview"
+  body = jsonencode({
+    properties = {
+      linkedResourceId = azurerm_log_analytics_workspace.this.id
+    }
+  })
+  ignore_casing = true
+  name          = each.value.name != null ? each.value.name : azurerm_log_analytics_workspace.this.name
+  parent_id     = each.value.resource_id
+}

terraform.tf

@@ -2,17 +2,21 @@ terraform {
   required_version = "~> 1.5"
   required_providers {
     # TODO: Ensure all required providers are listed here.
+    azapi = {
+      source  = "Azure/azapi"
+      version = "~> 1.14"
+    }
     azurerm = {
       source  = "hashicorp/azurerm"
       version = "~> 3.71"
     }
-    random = {
-      source  = "hashicorp/random"
-      version = "~> 3.5"
-    }
     modtm = {
       source  = "Azure/modtm"
       version = "~> 0.3"
     }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.5"
+    }
   }
 }

variables.tf

@@ -231,6 +231,18 @@ variable "monitor_private_link_scope_query_access_mode" {
   description = "(Optional) The default query access mode for the associated private endpoints in scope. Possible values are 'Open' and 'PrivateOnly'."
 }
 
+variable "monitor_private_link_scoped_resource" {
+  type = map(object({
+    name        = optional(string)
+    resource_id = string
+  }))
+  default     = {}
+  description = <<DESCRIPTION
+ - `name` - Defaults to the name of the Log Analytics Workspace.
+ - `resource_id` - Resource ID of an existing Monitor Private Link Scope to connect to.
+DESCRIPTION
+}
+
 variable "monitor_private_link_scoped_service_name" {
   type        = string
   default     = null