How gettek/terraform-azurerm-policy-as-code works
This repository provides Terraform modules and policy JSON for defining, grouping, assigning, and exempting Azure Policies. The documented workflow starts with custom policy definitions, optionally combines definitions into initiatives, assigns definitions or initiatives at a chosen scope, and manages exemptions and assignment-side compliance actions. The README supports these module relationships and describes evaluation scans and role/remediation behavior; source excerpts were unavailable, so implementation-level wiring is not inferred.
Main entry points: set_assignment Initiative assignment · definition Definition module · initiative Initiative module · def_assignment Definition assignment
Components 11
Policy authoring
- Definition module
modules/definition - Initiative module
modules/initiative
Policy assignment
- Definition assignment
modules/def_assignment - Initiative assignment
modules/set_assignment
Compliance operations
- Exemption module
modules/exemption - Role assignments
modules/set_assignment - Remediation tasks
modules/set_assignment - Evaluation scan
Policy catalog
- Policy JSON library
policies
Other components
- Terraform user
- Azure Policy
Connections 14
- Terraform user → Definition module: configures
- Definition module → Policy JSON library: loads policy JSON
- Terraform user → Initiative module: configures
- Initiative module → Definition module: uses definitions
- Terraform user → Definition assignment: configures
- Definition assignment → Azure Policy: creates assignment
- Terraform user → Initiative assignment: configures
- Initiative assignment → Azure Policy: creates assignment
- Terraform user → Exemption module: configures
- Exemption module → Azure Policy: creates exemption
- Initiative assignment → Role assignments: manages roles
- Initiative assignment → Remediation tasks: creates remediation
- Terraform user → Evaluation scan: requests scan
- Evaluation scan → Azure Policy: triggers evaluation