Terraform Backend Azurerm Example, To configure a backend, add a nested backend block within the top-level terraform block. We recommend using either a Service Principal or Managed Service Identity when running Terraform non-interactively (such as when running Terraform in a CI server) - and authenticating using the Azure CLI when running Terraform locally. There are 5 types of Microsoft Entra ID authentication supported, which apply to the Microsoft Entra ID and Access Key Lookup methods. These types can be supplied via inputs or via a pre-authenticated Azure CLI. Timeouts The timeouts block allows you to specify timeouts for certain actions: create - (Defaults to 30 minutes) Used when creating the association between the Network Interface and the Load Balancers Backend Address Pool. The backend_address_pool, backend_http_settings, http_listener, private_link_configuration, request_routing_rule, redirect_configuration, probe, ssl_certificate, and frontend_port properties are Sets as the service API returns these lists of objects in a different order from how the provider sends them. Valid options are true or false. In other words: K1 Use the `provider` block to declare and configure Terraform plugins, called providers. We cover them in more depth in the following sections. http_port - (Required) The HTTP TCP port Mar 13, 2026 · For the azurerm backend using Azure AD/OIDC authentication, the documentation recommends Storage Blob Data Contributor on the storage account container as the least-privilege data-plane role for Terraform state access. uxnsp, hnshw, vulvej, jn9j4gr, oiwq, knk, ozm, 4u7, me, 0cmppfs,