1st commit

.gitignore

@@ -0,0 +1,38 @@
+#vscode
+settings.json
+
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+
+# Ignore any .tfvars files that are generated automatically for each Terraform run. Most
+# .tfvars files are managed as part of configuration and so should be included in
+# version control.
+#
+# example.tfvars
+*.tfvars
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+#
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+*-plan
+
+# Ignore shell script which may contain secrets for authN
+devscript.sh
+.vscode/settings.json

README.md

@@ -0,0 +1,260 @@
+# AzureRM Monitor - Terraform parent module
+
+* Vendor reference [https://www.terraform.io/docs/providers/azurerm/index.html](https://www.terraform.io/docs/providers/azurerm/index.html)
+
+## Terraform resources/variables
+
+See child module READMEs
+
+### Example usage to call child modules
+
+```terraform
+
+terraform {
+  required_version = "~> 0.13.0"
+  required_providers {
+    azurerm = "~> 2.25.0"
+  }
+}
+
+provider "azurerm" {
+  features {
+  }
+}
+
+module "azmonitor-action-groups" {
+  source = "git::ssh://git@https://github.com/globalbao/terraform-azurerm-monitor//modules/AzMonitor-ActionGroups?ref=v1.0"
+
+  tags = {
+    Application = "Azure Monitor Alerts"
+    CostCentre  = "123"
+    Environment = "dev"
+    ManagedBy   = "Jesse Loudon"
+    Owner       = "Jesse Loudon"
+    Support     = "[email protected]"
+  }
+
+  actionGroups = {
+    "group1" = {
+      actionGroupName      = "AlertEscalationGroup"
+      actionGroupShortName = "alertesc"
+      actionGroupRGName    = "AzMonitorAlertGroups"
+      actionGroupEnabled   = "true"
+      actionGroupEmailReceiver = [
+        {
+          name                    = "jloudon"
+          email_address           = "[email protected]"
+          use_common_alert_schema = "true"
+        }
+      ]
+    },
+    "group2" = {
+      actionGroupName      = "AlertOperationsGroup"
+      actionGroupShortName = "alertops"
+      actionGroupRGName    = "AzMonitorAlertGroups"
+      actionGroupEnabled   = "true"
+      actionGroupEmailReceiver = [
+        {
+          name                    = "jloudon"
+          email_address           = "[email protected]"
+          use_common_alert_schema = "true"
+        }
+      ]
+    }
+  }
+}
+
+module "azmonitor-metric-alerts" {
+  source = "git::ssh://git@https://github.com/globalbao/terraform-azurerm-monitor//modules/AzMonitor-MetricAlerts?ref=v1.0"
+
+  tags = {
+    Application = "Azure Monitor Alerts"
+    CostCentre  = "123"
+    Environment = "dev"
+    ManagedBy   = "Jesse Loudon"
+    Owner       = "Jesse Loudon"
+    Support     = "[email protected]"
+  }
+
+  alertScope = {
+    "resource1" = {
+      resourceName  = "azmonloadbalancer1"
+      resourceGroup = "DevResources"
+      resourceType  = "Microsoft.Network/loadBalancers"
+    },
+    "resource2" = {
+      resourceName  = "azmonappgateway1"
+      resourceGroup = "DevResources"
+      resourceType  = "Microsoft.Network/appGateway"
+    },
+    "resource3" = {
+      resourceName  = "azmonsqldb1"
+      resourceGroup = "DevResources"
+      resourceType  = "Microsoft.Sql/servers/databases"
+    }
+  }
+
+  metricAlerts = {
+    "alert1" = {
+      alertName              = "azmonloadbalancer1-DipAvailability"
+      alertResourceGroupName = "DevResources"
+      alertScopes = [
+        module.azmonitor-metric-alerts.alert-scope["0"].resource1.resources[0].id
+      ]
+      alertDescription            = "Average Load Balancer health probe status per time duration"
+      alertEnabled                = "true"
+      alertAutoMitigate           = "true"
+      alertFrequency              = "PT15M"
+      alertWindowSize             = "PT1H"
+      alertSeverity               = "2"
+      alertTargetResourceType     = "Microsoft.Network/loadBalancers"
+      alertTargetResourceLoc      = "australiaeast"
+      dynCriteriaMetricNamespace  = "Microsoft.Network/loadBalancers"
+      dynCriteriaMetricName       = "DipAvailability"
+      dynCriteriaAggregation      = "Average"
+      dynCriteriaOperator         = "LessThan"
+      dynCriteriaAlertSensitivity = "Medium"
+      dynCriteriaDimensions = [
+        {
+          name     = "ProtocolType"
+          operator = "Include"
+          values   = "*"
+        },
+        {
+          name     = "FrontendIPAddress"
+          operator = "Include"
+          values   = "*"
+        },
+        {
+          name     = "BackendIPAddress"
+          operator = "Include"
+          values   = "*"
+        },
+      ]
+      actionGroupID = module.azmonitor-action-groups.ag["0"].group1.id
+    },
+    "alert2" = {
+      alertName              = "azmonloadbalancer1-VipAvailability"
+      alertResourceGroupName = "DevResources"
+      alertScopes = [
+        module.azmonitor-metric-alerts.alert-scope["0"].resource1.resources[0].id
+      ]
+      alertDescription            = "Average Load Balancer data path availability per time duration"
+      alertEnabled                = "true"
+      alertAutoMitigate           = "true"
+      alertFrequency              = "PT15M"
+      alertWindowSize             = "PT1H"
+      alertSeverity               = "2"
+      alertTargetResourceType     = "Microsoft.Network/loadBalancers"
+      alertTargetResourceLoc      = "australiaeast"
+      dynCriteriaMetricNamespace  = "Microsoft.Network/loadBalancers"
+      dynCriteriaMetricName       = "VipAvailability"
+      dynCriteriaAggregation      = "Average"
+      dynCriteriaOperator         = "LessThan"
+      dynCriteriaAlertSensitivity = "Medium"
+      dynCriteriaDimensions = [
+        {
+          name     = "FrontendPort"
+          operator = "Include"
+          values   = "*"
+        },
+        {
+          name     = "FrontendIPAddress"
+          operator = "Include"
+          values   = "*"
+        },
+      ]
+      actionGroupID = module.azmonitor-action-groups.ag["0"].group2.id
+    },
+    "alert3" = {
+      alertName              = "azmonappgateway1-UnhealthyHostcount"
+      alertResourceGroupName = "DevResources"
+      alertScopes = [
+        module.azmonitor-metric-alerts.alert-scope["0"].resource2.resources[0].id
+      ]
+      alertDescription            = "Current UnhealthyHostcount of the Application Gateway"
+      alertEnabled                = "true"
+      alertAutoMitigate           = "true"
+      alertFrequency              = "PT15M"
+      alertWindowSize             = "PT1H"
+      alertSeverity               = "2"
+      alertTargetResourceType     = "Microsoft.Network/applicationGateways"
+      alertTargetResourceLoc      = "australiaeast"
+      dynCriteriaMetricNamespace  = "Microsoft.Network/applicationGateways"
+      dynCriteriaMetricName       = "UnhealthyHostcount"
+      dynCriteriaAggregation      = "Average"
+      dynCriteriaOperator         = "GreaterThan"
+      dynCriteriaAlertSensitivity = "Medium"
+      dynCriteriaDimensions = [
+        {
+          name     = "BackendSettingsPool"
+          operator = "Include"
+          values   = "*"
+        }
+      ]
+      actionGroupID = module.azmonitor-action-groups.ag["0"].group1.id
+    },
+    "alert4" = {
+      alertName              = "azmonappgateway1-FailedRequests"
+      alertResourceGroupName = "DevResources"
+      alertScopes = [
+        module.azmonitor-metric-alerts.alert-scope["0"].resource2.resources[0].id
+      ]
+      alertDescription            = "Count of failed requests that Application Gateway has served"
+      alertEnabled                = "true"
+      alertAutoMitigate           = "true"
+      alertFrequency              = "PT15M"
+      alertWindowSize             = "PT1H"
+      alertSeverity               = "2"
+      alertTargetResourceType     = "Microsoft.Network/applicationGateways"
+      alertTargetResourceLoc      = "australiaeast"
+      dynCriteriaMetricNamespace  = "Microsoft.Network/applicationGateways"
+      dynCriteriaMetricName       = "FailedRequests"
+      dynCriteriaAggregation      = "Total"
+      dynCriteriaOperator         = "GreaterThan"
+      dynCriteriaAlertSensitivity = "Medium"
+      dynCriteriaDimensions = [
+        {
+          name     = "BackendSettingsPool"
+          operator = "Include"
+          values   = "*"
+        }
+      ]
+      actionGroupID = module.azmonitor-action-groups.ag["0"].group1.id
+    }
+  }
+
+  metricAlerts-noDimensions = {
+    "alert1" = {
+      alertName              = "azmonsqldb1-avg_cpu_percent"
+      alertResourceGroupName = "DevResources"
+      alertScopes = [
+        module.azmonitor-metric-alerts.alert-scope["0"].resource3.resources[0].id
+      ]
+      alertDescription            = "Average CPU percentage"
+      alertEnabled                = "true"
+      alertAutoMitigate           = "true"
+      alertFrequency              = "PT15M"
+      alertWindowSize             = "PT1H"
+      alertSeverity               = "3"
+      alertTargetResourceType     = "Microsoft.Sql/managedInstances"
+      alertTargetResourceLoc      = "australiaeast"
+      dynCriteriaMetricNamespace  = "Microsoft.Sql/managedInstances"
+      dynCriteriaMetricName       = "avg_cpu_percent"
+      dynCriteriaAggregation      = "Average"
+      dynCriteriaOperator         = "GreaterThan"
+      dynCriteriaAlertSensitivity = "Medium"
+      actionGroupID               = module.azmonitor-action-groups.ag["0"].group2.id
+    }
+  }
+}
+```
+
+## Modifying this repository
+
+* If changes are made to `.tf` files it's best practice to use `terraform fmt` and `terrform validate` afterwards.
+
+```terraform
+terraform fmt -recursive
+terraform validate
+```

examples/README.md

@@ -0,0 +1,7 @@
+# AzureRM Monitor Action Groups - examples
+
+Example files provided can be used as a baseline to call the Azure Monitor child modules.
+
+* main.tf
+* outputs.tf
+* variables.tf