WIP

modules/cdn-profile/src/main.tf

@@ -8,4 +8,32 @@ resource "azurerm_cdn_profile" "main" {
   tags = merge(var.tags, local.tags)
 }
 
-// TODO: Diag settings?
+resource "azurerm_monitor_diagnostic_setting" "main" {
+  name                       = "log-analytics"
+  target_resource_id         = azurerm_cdn_profile.main.id
+  log_analytics_workspace_id = var.log_analytics_workspace_id
+
+  dynamic "enabled_log" {
+    for_each = var.log_categories
+
+    content {
+      category = enabled_log.value
+    }
+  }
+
+  dynamic "enabled_log" {
+    for_each = var.log_category_groups
+
+    content {
+      category_group = enabled_log.value
+    }
+  }
+
+  dynamic "metric" {
+    for_each = var.metric_categories
+
+    content {
+      category = metric.value
+    }
+  }
+}

modules/cdn-profile/src/variables.tf

@@ -6,6 +6,30 @@ variable "identifier" {
   type = string
 }
 
+variable "log_analytics_workspace_id" {
+  type = string
+}
+
+# https://learn.microsoft.com/en-us/azure/azure-monitor/reference/supported-logs/microsoft-cdn-profiles-logs
+variable "log_categories" {
+  type    = list(string)
+  default = []
+}
+
+variable "log_category_groups" {
+  type = list(string)
+  default = [
+    "audit",
+  ]
+}
+
+variable "metric_categories" {
+  type = list(string)
+  default = [
+    "AllMetrics",
+  ]
+}
+
 variable "resource_group_name" {
   type = string
 }

modules/cdn-profile/test/main.tf

@@ -10,6 +10,8 @@ module "cdn_profile" {
   resource_group_name = "qux"
   zone                = "baz"
 
+  log_analytics_workspace_id = "quux"
+
   tags = {
     Foo = "Bar"
   }