Table of Contents

1. Challenge

   Create an Azure Storage Account

   In this objective, you'll create an Azure Storage account using Terraform. Make sure to include the storage account name in the outputs.

   1. Log into Azure using the Azure CLI.
   2. Create a new folder to hold a Terraform Configuration to deploy a storage account.
   3. Add a provider block for the azurerm provider with skip_provider_registration and storage_use_azuread set to true.
   4. Add the existing resource group as a data source.
   5. Create a random integer resource to generate a unique storage account name.
   6. Create an Azure Storage account with the following settings:
      • HTTPS traffic only: Enabled
      • Shared access key: Disabled
      • Default to OAuth authentication: Enabled
   7. Create a container in the storage account named tfstate.
   8. Initialize and deploy the Terraform configuration.
   9. Make note of the storage account name for the next objective.
2. Challenge

   Deploy a Virtual Network with the Local Backend

   In this objective, you'll deploy a simple virtual network configuration using the local backend. The configuration will be updated in the next objective to use the azurerm backend instead.

   1. Create a new folder to hold a Terraform Configuration to deploy a virtual network.
   2. Add a provider block for the azurerm provider with skip_provider_registration and storage_use_azuread set to true.
   3. Add the existing resource group as a data source.
   4. Add an azurerm_virtual_network resource.
   5. Initialize and deploy the Terraform configuration.
3. Challenge

   Update the Backend and Migrate State Data

   In this objective, you'll update the virtual network configuration to use the azurerm backend with a partial configuration. Then you'll initialize the configuration to migrate the existing state data to the storage account created in the first objective.

   1. Update you configuration to use the azurerm backend with a partial configuration.
   2. Create a backend configuration file with use_azuread_auth set to true.
   3. Use the storage account name from the first objective and the existing resource group name in the backend configuration.
   4. Run terraform init to initialize the configuration and migrate state data.
   5. Accept the migration prompt to copy the state data to the storage account.
   6. Verify the state data is stored in the storage account container.