Background

As part of the AAP Terraform integration users need the ability to create a remote Terraform state backend that they can use to manage Terraform state. We will create several validated content roles to make this process easier.

For the Azure backend, create a new role in the cloud.terraform_ops repo that will ensure the necessary Azure infrastructure is present for an Azurerm remote backend for Terraform. This role should ensure that:

• the specified resource group is present
• the specified storage account is present
• the specified container is present
• the service principal is assigned the Storage Blob Data Contributor role for the specified container

Definition of Done

• A new role exists in the cloud.terraform_ops collection that can create the Azure resources described above
• A user should be able to create the resources using the role and then run terraform init && terraform apply on a TF project with the newly created backend configuration
• A short demo showcasing the functionality has been recorded