From 3617312d53872872b34af313079f3ecd0a6017b5 Mon Sep 17 00:00:00 2001 From: John Rampono Date: Mon, 22 Aug 2022 20:48:10 +0800 Subject: [PATCH] Radme changes --- solution/DeploymentV2/README.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/solution/DeploymentV2/README.md b/solution/DeploymentV2/README.md index cbd82c1e..531a3ef1 100644 --- a/solution/DeploymentV2/README.md +++ b/solution/DeploymentV2/README.md @@ -76,9 +76,12 @@ The configuration for this environment creation is read from the following locat ## :green_circle: PART 3. Deployment Details ### Deployment Layers - Summary + +[Deploy.ps1](Deploy.ps1) provides a simple way for you to deploy all of the terraform layers included in this deployment at once. In practice, when setting up a CICD based deployment you will most likely choose to break this up and deploy each layer separately. The table below provides a summary of the different terraform layers included in this solution. Click the links in the first column to browse detailed layer documentation prodcued using [https://terraform-docs.io/](https://terraform-docs.io/) + Layer | Description | Permissions Required when using Service Principal | Permissions Required when using User Principal | --- | --- | --- | --- | [Terraform Layer Zero](./terraform_layer0/tformdocs.md) | Deploys the spoke VNET with subnets, dns zones, bastion & a VM for the CICD agent | Resouce Group Owner

Blob Contributor on Terraform's State Storage Account | Resouce Group Owner

Blob Contributor on Terraform's State Storage Account [Terraform Layer One](./terraform_layer1/tformdocs.md)| Register AAD Enterprise Applications & Service Principals | Application.ReadWrite.OwnedBy

Blob Contributor on Terraform's State Storage Account| Application Administrator (Role)

Blob Contributor on Terraform's State Storage Account -Terraform Layer Two | Core IAC deployment for approx. 70 ADS Go fast resources | Resource Group Owner

Blob Contributor on Terraform's State Storage Account| Resource Group Owner

Blob Contributor on Terraform's State Storage Account -Terraform Layer Three | Update AAD Enterprise Applications by granting required roles and permissions to managed service identities created in Layer Two

Create Private Endpoints for Purview | Application.ReadWrite.OwnedBy
(Must be same identity as that which was used to run Layer One)

Blob Contributor on Terraform's State Storage Account | Application Administrator (Role),

Network Contributor

Blob Contributor on Terraform's State Storage Account +[Terraform Layer Two](./terraform_layer2/tformdocs.md)| Core IAC deployment for approx. 70 ADS Go fast resources | Resource Group Owner

Blob Contributor on Terraform's State Storage Account| Resource Group Owner

Blob Contributor on Terraform's State Storage Account +[Terraform Layer Three](./terraform_layer3/tformdocs.md)| Update AAD Enterprise Applications by granting required roles and permissions to managed service identities created in Layer Two

Create Private Endpoints for Purview | Application.ReadWrite.OwnedBy
(Must be same identity as that which was used to run Layer One)

Blob Contributor on Terraform's State Storage Account | Application Administrator (Role),

Network Contributor

Blob Contributor on Terraform's State Storage Account