terraform-azurerm-caf-enterprise-scale VS terraform-azurerm-caf

I'm planning to use the official landing zone module developped by MSFT, but it's a big bite. https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/wiki

u/Ok-Inspection3886 Great question! Under the hood we use the Azure landing zones terraform module which is recommended by Azure when using Terraform if you're interested in "Platform Landing Zones". The module itself deploys custom policies and also allows users to add additional custom policies relatively easy.

Honestly, https://github.com/Azure/terraform-azurerm-caf-enterprise-scale does a pretty good job at deploying a landing zone-architecture, is active and maintained. I wouldnt try to re-invent the work Microsoft are doing themself but rather contribute to that project and build tools around the existing module. An issue I often hear from people is that they have a hard time visualizing which policies are added on parent management groups and how to exclude/adjust them.

To add to the links, azure released their own version of terraformer (I've never used it myself but if your deployments are on azure it may fill the gaps where terraformer fails) https://techcommunity.microsoft.com/t5/azure-tools-blog/announcing-azure-terrafy-and-azapi-terraform-provider-previews/ba-p/3270937 also https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/tree/main covers creating terraform to create stuff like policies not managed by the standard azurerm terraform module. Best of luck!

The azure environment I'm working on has the Terraform Module for Cloud Adoption Framework Enterprise-scale implemented, so how is the right pattern to connect the cosmos DB with the Hub VNet and also be able to receive data from external sources?

Microsoft provides a an excellent enterprise scale terraform setup here: https://github.com/Azure/terraform-azurerm-caf-enterprise-scale

While reading up on things I also keep coming accords this module as well: aztfmod Azure Landing zones Terraform module (refered as supermodule). Do you have any thoughts on this module? Again it seems Microsoft developed – it’s a bit confusing what you should or should not be using.

This should give you a good reference point in terms of what’s needed in a module and so on. Good luck! terraform azure landing zone

We use the CAF Terraform for Azure module and create most of our resources with it. There are instances where we have to use Native Terraform. This time we had to create a VNET using Terraform azurerm_virtual_network because it needed to be cross subscriptions and the CAF module didn't have an option for this. We nee to create an Azure APIM and we are using CAF but the issue we are having now is referencing the virtual network inside the CAF APIM see example here does anyone know how to reference a native Terraform resource to a CAF resource?

We make use of the Microsoft curated Cloud Adoption Framework Terraform modules (Best practice), they've done a huge amount of heavy lifting for you already: https://github.com/aztfmod/terraform-azurerm-caf