Install an Azure connector on ACI using Terraform

Learn how to deploy a connector in an Azure environment

Azure Container Instances (ACI) is a managed, serverless compute platform for running containerized applications. This guide explains how to install and configure an Apono connector on ACI in your Azure environment using Terraform.

---

Prerequisites

Item	Description
Apono Token	Account-specific Apono authentication value Use the following steps to obtain your token: On the Connectors page, click Install Connector. The Install Connector page appears. Click Cloud installation > Azure > Install and Connect Azure Account > Terraform (Container Instance). Copy the token in step listed on the page in step 1.
Terraform Command Line Interface (Terraform CLI)	Tool that enables interacting with Azure services using your command-line shell
Azure Cloud Information	Information for your Azure Cloud instance: Resource group name Subnet IDs
Owner Role (Azure RBAC)	Azure role with the following permissions: Grants full access to manage all resources Assigns roles in Azure RBAC
Global Administrator	Microsoft Entra role with the following permission: Manages all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities ❗Apono does not require Global Administrator access. This is required for the admin following this guide. ❗

---

Install a new connector

The connector requires the following roles:

1. Directory Readers - to validate users in Azure

2. User Access Administrator - to provision and deprovision access in the Management Group

Read more about these Microsoft Entra ID roles here.

Follow these steps to set up a new connector:

1. At the shell prompt, set the Apono environment variables to your account token.

export APONO_TOKEN=<APONO_TOKEN>
export RESOURCE_GROUP_NAME=<AZURE_RESOURCE_GROUP_NAME>
export SUBNET_ID=[<SUBNET_ID>]

1. In a new or existing Terraform (.tf) file, add the following provider and module information to create a connector with permissions or without permissions:

With Permissions

Enables installing the connector in the cloud environment and managing access to resources

module "connector" {
    source = "github.com/apono-io/terraform-modules/azure/connector-with-permissions/stacks/apono-connector"
    aponoToken = $APONO_TOKEN
    resourceGroup = $AZURE_RESOURCE_GROUP
    ipAddressType = // "Private" or "None"
    subnetIds = [$SUBNET_ID]
}

Without Permissions

Enables installing the connector in the cloud environment but managing access to non-Azure resources, such as self-hosted databases

module "connector" {
    source = "github.com/apono-io/terraform-modules/azure/connector-without-permissions/stacks/apono-connector"
    aponoToken = $APONO_TOKEN
    resourceGroup = $AZURE_RESOURCE_GROUP
    ipAddressType = // "Private" or "None"
    subnetIds = [$SUBNET_ID]
}

1. At the Terraform CLI, download and install the provider plugin and module.

terraform init

1. Apply the Terraform changes. The proposed changes and a confirmation prompt will be listed.

terraform apply

1. Enter yes to confirm deploying the changes to your Azure account.

2. On the Connectors page, verify that the connector has been deployed.

You can now integrate with an Azure Management Group or Azure Subscription.