azure-active-directory - 如何使用 terraform 通过 apim 开发人员门户启用 aad

Question

如何使用 terraform 通过 apim 开发人员门户启用 aad（Azure Active Directory 用户）？

您好，如何使用 terraform 将 Azure Active Directory 用户添加/启用到 apim 开发人员门户，以便我的用户可以使用 AAD 凭据登录到 apim 开发人员门户。

我们可以使用此链接上描述的步骤（https://docs.microsoft.com/en-us/azure/api-management/get-started-create-service-instance）。如果是，我们也可以使用 terraform 来实现它吗？

我正在考虑使用这一小块 terraform 配置任务来创建 APIM 实例并添加 AAD 身份提供者资源

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_api_management" "example" {
  name                = "example-apim"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  publisher_name      = "My Company"
  publisher_email     = "[e-mail]"
  sku_name            = "Developer_1"
}

resource "azurerm_api_management_identity_provider_aad" "example" {
  resource_group_name = azurerm_resource_group.example.name
  api_management_name = azurerm_api_management.example.name
  client_id           = "00000000-0000-0000-0000-000000000000"
  client_secret       = "00000000000000000000000000000000"
  allowed_tenants     = ["00000000-0000-0000-0000-000000000000"]
}

上面的代码可以解决问题还是我还需要添加/创建一些其他资源？

标签： azure-active-directoryterraform

Answer 1

下面的代码可以解决问题。

resource "azurerm_resource_group" "example" {
  name     = "example-resources"
  location = "West Europe"
}

resource "azurerm_api_management" "example" {
  name                = "example-apim"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  publisher_name      = "My Company"
  publisher_email     = "[e-mail]"
  sku_name            = "Developer_1"
}

resource "azurerm_api_management_identity_provider_aad" "example" {
  resource_group_name = azurerm_resource_group.example.name
  api_management_name = azurerm_api_management.example.name
  client_id           = "00000000-0000-0000-0000-000000000000"
  client_secret       = "00000000000000000000000000000000"
  allowed_tenants     = ["00000000-0000-0000-0000-000000000000"]
}