In order to use Terraform to deploy to the cloud, you need to either be logged in to Azure all ready or you need to create a Service Principle.
How to login to Azure?
Given that you have an account:
But this won’t work in the cloud as it’s not headless and will leak credentials. So this is a non-starter. For testing, we need to stay logged out.
That said, we do need to login to manipulate Service Principles. So log back in for this portion of this tutorial.
What is a Service Principle in Azure?
“An Azure service principal is a security identity used by user-created apps, services, and automation tools to access specific Azure resources.” 1
List all your current Service Principles:
Create a new Service Principle
This will give you the following:
“displayName”: XXX,
“password”: XXX,
“tenant”: XXX
}
Map the Service Principle JSON to Terraform Variables
In the provider block:
client_id: This is the appId from the Service Principal JSON object.
client_secret: This is the password from the Service Principal JSON object.
tenant_id: This is the tenant from the Service Principal JSON object.
subscription_id: This is your Azure subscription ID. It’s optional if the Service Principal has
features {}
# Use the appId (client ID), password (client secret), and tenant ID (tenant)
client_id = var.client_id
client_secret = var.client_secret
tenant_id = var.tenant_id
subscription_id = var.subscription_id # Optional: specify your Azure subscription ID
}
Links
Official Azure Service Principle Docs: https://learn.microsoft.com/en-us/cli/azure/azure-cli-sp-tutorial-1?toc=%2Fazure%2Fazure-resource-manager%2Ftoc.json&view=azure-cli-latest&tabs=bash
Azure Service Principle Creation: https://stackoverflow.com/questions/48096342/what-is-azure-service-principal
