在Azure，我如何将监管法规内建计划- ISO 27001:2013分配给一个管理小组？

Question

我想指定一个管理小组的监管法规内建计划- ISO 27001:2013？如何使用Terraform实现？

Answer 1

我可以像下面提到的那样指定ISO 27001:2013计划。

data azurerm_subscription "current" { }

// ISO 27001:2013 Initivate
data "azurerm_policy_set_definition" "iso27001" {
  display_name = "ISO 27001:2013"
}

resource "azurerm_subscription_policy_assignment" "iso27001_assignment" {
  name                 = "iso27001_assignment"
  policy_definition_id = data.azurerm_policy_set_definition.iso27001.id
  subscription_id      = data.azurerm_subscription.current.id
  description          = "Assignment of the ISO 27001:2013 initiative to subscription."
  display_name         = "ISO 27001:2013 Governance"
  location             = "eastus"

  identity { 
    type = "SystemAssigned" 
  }
}