Azure rendering solution deployment framework

This commit is contained in:
Rick Shahid 2022-11-30 04:39:20 -08:00
Родитель ec881abfbe
Коммит be29b853ec
1 изменённых файлов: 3 добавлений и 3 удалений

Просмотреть файл

@ -5,12 +5,12 @@ Azure Artist Anywhere (AAA) is a *modular and customizable [infrastructure-as-co
https://user-images.githubusercontent.com/22285652/202864874-e48070dc-deaa-45ee-a8ed-60ff401955f0.mp4
The following *core design principles* are implemented throughout the AAA solution deployment framework.
* Integration of security best practices, including [Managed Identity](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview), [Key Vault](https://learn.microsoft.com/azure/key-vault/general/overview), [Private Endpoints](https://learn.microsoft.com/azure/private-link/private-endpoint-overview) and [Network Security Groups](https://learn.microsoft.com/azure/virtual-network/network-security-groups-overview).
* Integration of security best practices, including [Managed Identity](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview), [Key Vault](https://learn.microsoft.com/azure/key-vault/general/overview), [Private Endpoints](https://learn.microsoft.com/azure/private-link/private-endpoint-overview), [Network Security Groups](https://learn.microsoft.com/azure/virtual-network/network-security-groups-overview), etc.
* Any custom or 3rd-party software (render manager, render engines, etc) in a [Compute Gallery](https://learn.microsoft.com/azure/virtual-machines/shared-image-galleries) custom image is supported.
* Clean separation of AAA module deployment configuration files (*config.auto.tfvars*) and code files (*main.tf*) via [Terraform](https://www.terraform.io).
| **Module Name** | **Module Description** | **Required for<br>Compute Burst?** | **Required for<br>All Cloud?** |
| --------------- | ---------------------- | ---------------------------------- | ------------------------------ |
| **Module Name** | **Module Description** | **Module Required for<br>Compute Burst Only?** | **Module Required for<br>All Cloud Solution?<br>(Compute & Storage)** |
| --------------- | ---------------------- | ---------------------------------------------- | --------------------------------------------------------------------- |
| [0 Global](#0-global) | Defines global variables (e.g., Azure region) and Terraform backend state storage config. | Yes | Yes |
| [1 Security](#1-security) | Deploys [Managed Identity](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview), [Key Vault](https://learn.microsoft.com/azure/key-vault/general/overview) and [Blob Storage](https://learn.microsoft.com/azure/storage/blobs/storage-blobs-introduction) for Terraform state file management. | Yes | Yes |
| [2 Network](#2-network) | Deploys [Virtual Network](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview) and [Bastion](https://learn.microsoft.com/azure/bastion/bastion-overview) with [VPN](https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpngateways) or [ExpressRoute](https://learn.microsoft.com/azure/expressroute/expressroute-about-virtual-network-gateways) hybrid networking services. | Yes, if [Virtual Network](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview) not deployed. Otherwise, No | Yes, if [Virtual Network](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview) not deployed. Otherwise, No |