storage_account - ATP not available in Azure Germany

[sigv]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform (and AzureRM Provider) Version

Terraform v0.11.14
+ provider.azurerm v1.35.0

Affected Resource(s)

• azurerm_storage_account

Terraform Configuration Files

resource "azurerm_resource_group" "primary" {
  name     = "ABC"
  location = "Germany Central"
}

resource "azurerm_storage_account" "storagestandard" {
  name                              = "destoragestandard"
  resource_group_name               = "${azurerm_resource_group.primary.name}"
  location                          = "${azurerm_resource_group.primary.location}"
  account_kind                      = "StorageV2"
  account_tier                      = "Standard"
  account_replication_type          = "LRS"
  enable_https_traffic_only         = true
  enable_advanced_threat_protection = false
}

Error Output

Error: Error refreshing state: 1 error occurred:
        * azurerm_storage_account.storagestandard: 1 error occurred:
        * azurerm_storage_account.storagestandard: azurerm_storage_account.storagestandard: Error reading the advanced threat protection settings of AzureRM Storage Account "destoragestandard": security.AdvancedThreatProtectionClient#Get: Failure responding to request: StatusCode=404 -- Original Error: autorest/azure: Service returned an error. Status=404 Code="InvalidResourceNamespace" Message="The resource namespace 'Microsoft.Security' is invalid."

Expected Behavior

enable_advanced_threat_protection is ignored as not available in Azure Germany.

Actual Behavior

Any action involving the storage account fails with a HTTP/2.0 404 Not Found on the AzureRM Response for the APT resource.

Steps to Reproduce

terraform apply / terraform refresh -target=azurerm_storage_account.storagestandard

Important Factoids

Specific to Azure Germany.

Our environments in regular AzureCloud do not have trouble with this.

References

• storage account - Advanced Threat Protection not available in all regions or Azure Gov #3920 APT not available in Azure Government Cloud.

[sigv]

PR #4564 submitted based on how #3947 was done.

[ghost]

This has been released in version 1.36.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 1.36.0"
}
# ... other configuration ...

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!