If these Terraform modules have been helpful to you or your organization, I'd appreciate your support in any of the following ways:

• ⭐ Star a module repository to help others discover the Terraform module too. (It helps the GitHub Algorithm)
• 🤝 Connect with me on LinkedIn: linkedin.com/in/microsoftexpert
• ☕ Buy me a coffee: buymeacoffee.com/microsoftexpert

Whether it's a star, a professional connection, or a coffee, every gesture helps keep these modules actively maintained and continually improving. Thank you for being part of the community!

All 1,810 modules, grouped by provider and then by domain — every name links straight to its repository.

Prefix every entry with terraform-azurerm-  ·  Browse all 903 repos →

Analytics & AI/ML (155)
ai-foundry · ai-foundry-project · analysis-services-server · bot-channel-alexa · bot-channel-direct-line-speech · bot-channel-directline · bot-channel-email · bot-channel-facebook · bot-channel-line · bot-channel-ms-teams · bot-channel-slack · bot-channel-sms · bot-channel-web-chat · bot-connection · bot-service-azure-bot · cognitive-account · cognitive-deployment · data-factory · data-factory-credential-service-principal · data-factory-credential-user-managed-identity · data-factory-custom-dataset · data-factory-customer-managed-key · data-factory-data-flow · data-factory-dataset-azure-blob · data-factory-dataset-azure-sql-table · data-factory-dataset-binary · data-factory-dataset-cosmosdb-sqlapi · data-factory-dataset-delimited-text · data-factory-dataset-http · data-factory-dataset-json · data-factory-dataset-mysql · data-factory-dataset-parquet · data-factory-dataset-postgresql · data-factory-dataset-snowflake · data-factory-dataset-sql-server-table · data-factory-flowlet-data-flow · data-factory-integration-runtime-azure · data-factory-integration-runtime-azure-ssis · data-factory-integration-runtime-self-hosted · data-factory-linked-custom-service · data-factory-linked-service-azure-blob-storage · data-factory-linked-service-azure-databricks · data-factory-linked-service-azure-file-storage · data-factory-linked-service-azure-function · data-factory-linked-service-azure-search · data-factory-linked-service-azure-sql-database · data-factory-linked-service-azure-table-storage · data-factory-linked-service-cosmosdb · data-factory-linked-service-cosmosdb-mongoapi · data-factory-linked-service-data-lake-storage-gen2 · data-factory-linked-service-key-vault · data-factory-linked-service-kusto · data-factory-linked-service-mysql · data-factory-linked-service-odata · data-factory-linked-service-odbc · data-factory-linked-service-postgresql · data-factory-linked-service-sftp · data-factory-linked-service-snowflake · data-factory-linked-service-sql-managed-instance · data-factory-linked-service-sql-server · data-factory-linked-service-synapse · data-factory-linked-service-web · data-factory-managed-private-endpoint · data-factory-pipeline · data-factory-trigger-blob-event · data-factory-trigger-custom-event · data-factory-trigger-schedule · data-factory-trigger-tumbling-window · data-share · data-share-dataset-blob-storage · data-share-dataset-data-lake-gen2 · data-share-dataset-kusto-cluster · data-share-dataset-kusto-database · databricks-access-connector · databricks-virtual-network-peering · databricks-workspace · fabric-capacity · hdinsight-hadoop-cluster · hdinsight-hbase-cluster · hdinsight-interactive-query-cluster · hdinsight-kafka-cluster · hdinsight-spark-cluster · healthbot · kusto-attached-database-configuration · kusto-cluster · kusto-cluster-customer-managed-key · kusto-cluster-managed-private-endpoint · kusto-cluster-principal-assignment · kusto-cosmosdb-data-connection · kusto-database · kusto-database-principal-assignment · kusto-eventgrid-data-connection · kusto-eventhub-data-connection · kusto-iothub-data-connection · kusto-script · machine-learning-compute-cluster · machine-learning-compute-instance · machine-learning-datastore-blobstorage · machine-learning-datastore-datalake-gen2 · machine-learning-datastore-fileshare · machine-learning-inference-cluster · machine-learning-synapse-spark · machine-learning-workspace · machine-learning-workspace-network-outbound-rule-fqdn · machine-learning-workspace-network-outbound-rule-private-endpoint · machine-learning-workspace-network-outbound-rule-service-tag · powerbi-embedded · purview-account · search-service · search-shared-private-link-service · stream-analytics-cluster · stream-analytics-function-javascript-uda · stream-analytics-function-javascript-udf · stream-analytics-job · stream-analytics-job-schedule · stream-analytics-job-storage-account · stream-analytics-managed-private-endpoint · stream-analytics-output-blob · stream-analytics-output-cosmosdb · stream-analytics-output-eventhub · stream-analytics-output-function · stream-analytics-output-mssql · stream-analytics-output-servicebus-queue · stream-analytics-output-servicebus-topic · stream-analytics-output-synapse · stream-analytics-output-table · stream-analytics-reference-input-blob · stream-analytics-reference-input-mssql · stream-analytics-stream-input-blob · stream-analytics-stream-input-eventhub · stream-analytics-stream-input-eventhub-v2 · stream-analytics-stream-input-iothub · synapse-firewall-rule · synapse-integration-runtime-azure · synapse-integration-runtime-self-hosted · synapse-linked-service · synapse-managed-private-endpoint · synapse-private-link-hub · synapse-role-assignment · synapse-spark-pool · synapse-sql-pool · synapse-sql-pool-extended-auditing-policy · synapse-sql-pool-security-alert-policy · synapse-sql-pool-vulnerability-assessment · synapse-sql-pool-vulnerability-assessment-baseline · synapse-sql-pool-workload-classifier · synapse-sql-pool-workload-group · synapse-workspace · synapse-workspace-aad-admin · synapse-workspace-extended-auditing-policy · synapse-workspace-key · synapse-workspace-security-alert-policy · synapse-workspace-sql-aad-admin · synapse-workspace-vulnerability-assessment · video-indexer-account

Compute & Containers (104)
app-service-certificate · app-service-connection · app-service-environment-v3 · app-service-managed-certificate · app-service-public-certificate · app-service-slot-custom-hostname-binding · app-service-slot-virtual-network-swift-connection · app-service-source-control · app-service-virtual-network-swift-connection · availability-set · batch-account · batch-application · batch-job · batch-pool · capacity-reservation · capacity-reservation-group · container-app · container-app-custom-domain · container-app-environment · container-app-environment-certificate · container-app-environment-custom-domain · container-app-environment-dapr-component · container-app-environment-managed-certificate · container-app-environment-storage · container-app-job · container-connected-registry · container-group · container-registry · container-registry-agent-pool · container-registry-cache-rule · container-registry-credential-set · container-registry-task · container-registry-task-schedule-run-now · container-registry-token-password · container-registry-webhook · dedicated-host · dedicated-host-group · function-app-active-slot · function-app-connection · function-app-flex-consumption · function-app-function · function-app-hybrid-connection · function-app-linux · function-app-linux-slot · function-app-windows · function-app-windows-slot · gallery-application · gallery-application-version · image · kubernetes-automatic-cluster · kubernetes-cluster · kubernetes-cluster-deployment-safeguard · kubernetes-cluster-extension · kubernetes-cluster-trusted-access-role-binding · kubernetes-fleet-manager · kubernetes-fleet-member · kubernetes-fleet-update-run · kubernetes-fleet-update-strategy · kubernetes-flux-configuration · linux-virtual-machine · linux-web-app · orchestrated-virtual-machine-scale-set · redhat-openshift-cluster · service-fabric-cluster · service-fabric-managed-cluster · service-plan · shared-image · shared-image-gallery · shared-image-version · static-web-app · static-web-app-custom-domain · static-web-app-function-app-registration · virtual-desktop-application · virtual-desktop-application-group · virtual-desktop-host-pool · virtual-desktop-host-pool-registration-info · virtual-desktop-scaling-plan · virtual-desktop-scaling-plan-host-pool-association · virtual-desktop-workspace · virtual-desktop-workspace-application-group-association · virtual-machine-automanage-configuration-assignment · virtual-machine-extension · virtual-machine-gallery-application-assignment · virtual-machine-implicit-data-disk-from-source · virtual-machine-packet-capture · virtual-machine-restore-point · virtual-machine-restore-point-collection · virtual-machine-run-command · virtual-machine-scale-set · virtual-machine-scale-set-extension · virtual-machine-scale-set-packet-capture · virtual-machine-scale-set-standby-pool · vmware-cluster · vmware-express-route-authorization · vmware-netapp-volume-attachment · vmware-private-cloud · web-app-active-slot · web-app-hybrid-connection · windows-virtual-machine · windows-virtual-machine-scale-set · windows-web-app · workloads-sap-discovery-virtual-instance · workloads-sap-single-node-virtual-instance · workloads-sap-three-tier-virtual-instance

Networking & Connectivity (87)
application-gateway · application-load-balancer · application-load-balancer-frontend · application-load-balancer-security-policy · application-load-balancer-subnet-association · cdn-endpoint · cdn-frontdoor-batch-rule-set · cdn-profile · custom-ip-prefix · express-route-circuit · express-route-circuit-authorization · express-route-circuit-connection · express-route-circuit-peering · express-route-connection · express-route-gateway · express-route-port · express-route-port-authorization · front-door · ip-group · ip-group-cidr · load-balancer · local-network-gateway · nat-gateway · nat-gateway-public-ip-prefix-association · network-connection-monitor · network-function-azure-traffic-collector · network-function-collector-policy · network-interface · network-interface-application-gateway-backend-address-pool-association · network-interface-application-security-group-association · network-interface-backend-address-pool-association · network-interface-nat-rule-association · network-interface-security-group-association · network-manager · network-manager-admin-rule · network-manager-admin-rule-collection · network-manager-connectivity-configuration · network-manager-deployment · network-manager-ipam-pool · network-manager-ipam-pool-static-cidr · network-manager-management-group-connection · network-manager-network-group · network-manager-routing-configuration · network-manager-routing-rule · network-manager-routing-rule-collection · network-manager-scope-connection · network-manager-security-admin-configuration · network-manager-static-member · network-manager-subscription-connection · network-manager-verifier-workspace · network-manager-verifier-workspace-reachability-analysis-intent · network-watcher · nginx-api-key · nginx-certificate · nginx-configuration · nginx-deployment · point-to-site-vpn-gateway · private-endpoint · private-endpoint-application-security-group-association · private-link-service · proximity-placement-group · public-ip · public-ip-prefix · route-filter · route-map · route-server · route-table · subnet · subnet-service-endpoint-storage-policy · virtual-hub · virtual-hub-bgp-connection · virtual-hub-connection · virtual-hub-ip · virtual-hub-route-table · virtual-hub-route-table-route · virtual-hub-routing-intent · virtual-hub-security-partner-provider · virtual-network · virtual-network-dns-servers · virtual-network-gateway · virtual-network-peering · virtual-wan · vpn-gateway · vpn-gateway-connection · vpn-gateway-nat-rule · vpn-server-configuration · vpn-site

Integration & Messaging (85)
api-connection · api-management · api-management-api · api-management-api-operation · api-management-authorization-server · api-management-backend · api-management-certificate · api-management-custom-domain · api-management-diagnostic · api-management-email-template · api-management-gateway · api-management-global-schema · api-management-group · api-management-identity · api-management-logger · api-management-named-value · api-management-notification · api-management-openid-connect-provider · api-management-policy · api-management-policy-fragment · api-management-product · api-management-redis-cache · api-management-standalone-gateway · api-management-subscription · api-management-tag · api-management-user · api-management-workspace · communication-service · email-communication-service · email-communication-service-domain · email-communication-service-domain-sender-username · eventgrid-domain · eventgrid-domain-topic · eventgrid-event-subscription · eventgrid-namespace · eventgrid-namespace-topic · eventgrid-partner-configuration · eventgrid-partner-namespace · eventgrid-partner-registration · eventgrid-system-topic · eventgrid-system-topic-event-subscription · eventgrid-topic · eventhub-authorization-rule · eventhub-cluster · eventhub-namespace · eventhub-namespace-authorization-rule · eventhub-namespace-customer-managed-key · eventhub-namespace-disaster-recovery-config · eventhub-namespace-schema-group · fluid-relay-server · logic-app-action-custom · logic-app-action-http · logic-app-integration-account · logic-app-integration-account-agreement · logic-app-integration-account-assembly · logic-app-integration-account-batch-configuration · logic-app-integration-account-certificate · logic-app-integration-account-map · logic-app-integration-account-partner · logic-app-integration-account-schema · logic-app-integration-account-session · logic-app-standard · logic-app-trigger-custom · logic-app-trigger-http-request · logic-app-trigger-recurrence · logic-app-workflow · notification-hub · notification-hub-authorization-rule · notification-hub-namespace · relay-hybrid-connection · relay-hybrid-connection-authorization-rule · relay-namespace · relay-namespace-authorization-rule · servicebus-namespace · servicebus-namespace-authorization-rule · servicebus-namespace-customer-managed-key · servicebus-namespace-disaster-recovery-config · servicebus-queue-authorization-rule · servicebus-topic-authorization-rule · signalr-service · signalr-service-custom-certificate · signalr-service-custom-domain · signalr-service-network-acl · signalr-shared-private-link-resource · web-pubsub

Security & Compliance (82)
advanced-threat-protection · application-security-group · attestation-provider · bastion-host · confidential-ledger · disk-access · disk-encryption-set · firewall · key-vault · key-vault-access-policy · key-vault-certificate-contacts · key-vault-certificate-issuer · key-vault-managed-hardware-security-module · key-vault-managed-hardware-security-module-key · key-vault-managed-hardware-security-module-key-rotation-policy · key-vault-managed-hardware-security-module-role-assignment · key-vault-managed-hardware-security-module-role-definition · network-ddos-protection-plan · network-security-group · network-security-perimeter · network-security-perimeter-access-rule · network-security-perimeter-association · network-security-perimeter-profile · palo-alto-local-rulestack · palo-alto-local-rulestack-certificate · palo-alto-local-rulestack-fqdn-list · palo-alto-local-rulestack-outbound-trust-certificate-association · palo-alto-local-rulestack-outbound-untrust-certificate-association · palo-alto-local-rulestack-prefix-list · palo-alto-local-rulestack-rule · palo-alto-next-generation-firewall-virtual-hub-local-rulestack · palo-alto-next-generation-firewall-virtual-hub-panorama · palo-alto-next-generation-firewall-virtual-hub-strata-cloud-manager · palo-alto-next-generation-firewall-virtual-network-local-rulestack · palo-alto-next-generation-firewall-virtual-network-panorama · palo-alto-next-generation-firewall-virtual-network-strata-cloud-manager · palo-alto-virtual-network-appliance · security-center-assessment · security-center-assessment-policy · security-center-automation · security-center-contact · security-center-server-vulnerability-assessment-virtual-machine · security-center-server-vulnerability-assessments-setting · security-center-setting · security-center-storage-defender · security-center-subscription-pricing · security-center-workspace · sentinel-alert-rule-anomaly-built-in · sentinel-alert-rule-anomaly-duplicate · sentinel-alert-rule-fusion · sentinel-alert-rule-machine-learning-behavior-analytics · sentinel-alert-rule-ms-security-incident · sentinel-alert-rule-nrt · sentinel-alert-rule-scheduled · sentinel-alert-rule-threat-intelligence · sentinel-automation-rule · sentinel-data-connector-aws-cloud-trail · sentinel-data-connector-aws-s3 · sentinel-data-connector-azure-active-directory · sentinel-data-connector-azure-advanced-threat-protection · sentinel-data-connector-azure-security-center · sentinel-data-connector-dynamics-365 · sentinel-data-connector-iot · sentinel-data-connector-microsoft-cloud-app-security · sentinel-data-connector-microsoft-defender-advanced-threat-protection · sentinel-data-connector-microsoft-threat-intelligence · sentinel-data-connector-microsoft-threat-protection · sentinel-data-connector-office-365 · sentinel-data-connector-office-365-project · sentinel-data-connector-office-atp · sentinel-data-connector-office-irm · sentinel-data-connector-office-power-bi · sentinel-data-connector-threat-intelligence · sentinel-data-connector-threat-intelligence-taxii · sentinel-log-analytics-workspace-onboarding · sentinel-metadata · sentinel-threat-intelligence-indicator · sentinel-watchlist · sentinel-watchlist-item · ssh-public-key · trusted-signing-account · web-application-firewall-policy

Data & Databases (70)
cosmosdb-account · cosmosdb-cassandra-cluster · cosmosdb-cassandra-datacenter · cosmosdb-cassandra-keyspace · cosmosdb-cassandra-table · cosmosdb-gremlin-database · cosmosdb-gremlin-graph · cosmosdb-mongo-collection · cosmosdb-mongo-database · cosmosdb-mongo-role-definition · cosmosdb-mongo-user-definition · cosmosdb-postgresql-cluster · cosmosdb-sql-dedicated-gateway · cosmosdb-sql-function · cosmosdb-sql-role-assignment · cosmosdb-sql-role-definition · cosmosdb-sql-stored-procedure · cosmosdb-sql-trigger · cosmosdb-table · database-migration-project · database-migration-service · managed-redis · managed-redis-access-policy-assignment · managed-redis-geo-replication · mongo-cluster · mssql-database · mssql-database-extended-auditing-policy · mssql-database-vulnerability-assessment-rule-baseline · mssql-elasticpool · mssql-failover-group · mssql-job · mssql-job-agent · mssql-job-credential · mssql-job-schedule · mssql-job-step · mssql-job-target-group · mssql-managed-database · mssql-managed-instance · mssql-managed-instance-active-directory-administrator · mssql-managed-instance-failover-group · mssql-managed-instance-security-alert-policy · mssql-managed-instance-start-stop-schedule · mssql-managed-instance-transparent-data-encryption · mssql-managed-instance-vulnerability-assessment · mssql-outbound-firewall-rule · mssql-server · mssql-server-dns-alias · mssql-server-extended-auditing-policy · mssql-server-microsoft-support-auditing-policy · mssql-server-security-alert-policy · mssql-server-transparent-data-encryption · mssql-server-vulnerability-assessment · mssql-virtual-machine · mssql-virtual-machine-availability-group-listener · mssql-virtual-machine-group · mysql-flexible-server · oracle-autonomous-database · oracle-autonomous-database-clone-from-backup · oracle-autonomous-database-clone-from-database · oracle-cloud-vm-cluster · oracle-exadata-infrastructure · oracle-exascale-database-storage-vault · oracle-resource-anchor · postgresql-flexible-server · postgresql-flexible-server-backup · postgresql-flexible-server-virtual-endpoint · redis-cache · redis-cache-access-policy · redis-firewall-rule · redis-linked-server

Governance & Management (52)
advisor-suppression · automanage-configuration · billing-account-cost-management-export · consumption-budget-management-group · consumption-budget-resource-group · consumption-budget-subscription · cost-anomaly-alert · cost-management-scheduled-action · lighthouse-assignment · lighthouse-definition · maintenance-assignment-dedicated-host · maintenance-assignment-dynamic-scope · maintenance-assignment-virtual-machine · maintenance-assignment-virtual-machine-scale-set · maintenance-configuration · managed-application · managed-application-definition · management-group · management-group-policy-assignment · management-group-policy-exemption · management-group-policy-remediation · management-group-policy-set-definition · management-group-template-deployment · marketplace-agreement · policy-assignment · policy-definition · policy-set-definition · policy-virtual-machine-configuration-assignment · portal-tenant-configuration · resource-deployment-script-azure-cli · resource-deployment-script-azure-power-shell · resource-group · resource-group-cost-management-export · resource-group-cost-management-view · resource-group-policy-exemption · resource-group-policy-remediation · resource-group-template-deployment · resource-management-private-link · resource-management-private-link-association · resource-policy-assignment · resource-policy-exemption · resource-policy-remediation · resource-provider-feature-registration · resource-provider-registration · subscription · subscription-cost-management-export · subscription-cost-management-view · subscription-policy-assignment · subscription-policy-exemption · subscription-policy-remediation · subscription-template-deployment · tenant-template-deployment

Monitoring & Observability (51)
application-insights · application-insights-analytics-item · application-insights-api-key · application-insights-smart-detection-rule · application-insights-standard-web-test · application-insights-web-test · application-insights-workbook · application-insights-workbook-template · dashboard-grafana · dashboard-grafana-managed-private-endpoint · datadog-monitor · datadog-monitor-sso-configuration · datadog-monitor-tag-rule · dynatrace-monitor · dynatrace-tag-rules · elastic-cloud-elasticsearch · log-analytics-cluster · log-analytics-cluster-customer-managed-key · log-analytics-datasource-windows-event · log-analytics-datasource-windows-performance-counter · log-analytics-linked-service · log-analytics-linked-storage-account · log-analytics-query-pack · log-analytics-query-pack-query · log-analytics-saved-search · log-analytics-storage-insights · log-analytics-workspace · log-analytics-workspace-table · log-analytics-workspace-table-custom-log · log-analytics-workspace-table-microsoft · monitor-aad-diagnostic-setting · monitor-action-group · monitor-activity-log-alert · monitor-alert-processing-rule-action-group · monitor-alert-processing-rule-suppression · monitor-alert-prometheus-rule-group · monitor-autoscale-setting · monitor-data-collection-endpoint · monitor-data-collection-rule · monitor-diagnostic-setting · monitor-metric-alert · monitor-private-link-scope · monitor-private-link-scoped-service · monitor-scheduled-query-rules-alert · monitor-scheduled-query-rules-alert-v2 · monitor-scheduled-query-rules-log · monitor-smart-detector-alert-rule · monitor-workspace · new-relic-monitor · new-relic-tag-rule · portal-dashboard

Developer Platform & DevOps (50)
app-configuration · automation-account · automation-certificate · automation-connection · automation-connection-certificate · automation-connection-classic-certificate · automation-connection-service-principal · automation-connection-type · automation-credential · automation-dsc-configuration · automation-dsc-nodeconfiguration · automation-hybrid-runbook-worker · automation-job-schedule · automation-module · automation-powershell72-module · automation-python3-package · automation-runbook · automation-runtime-environment · automation-schedule · automation-source-control · automation-variable-bool · automation-variable-datetime · automation-variable-int · automation-variable-object · automation-variable-string · automation-watcher · automation-webhook · chaos-studio-capability · chaos-studio-experiment · chaos-studio-target · dev-center · dev-center-attached-network · dev-center-catalog · dev-center-dev-box-definition · dev-center-environment-type · dev-center-gallery · dev-center-network-connection · dev-center-project · dev-center-project-environment-type · dev-center-project-pool · dev-test-global-vm-shutdown-schedule · dev-test-lab · dev-test-linux-virtual-machine · dev-test-policy · dev-test-schedule · dev-test-virtual-network · dev-test-windows-virtual-machine · load-test · managed-devops-pool · source-control-token

IoT, Hybrid & Edge (50)
arc-kubernetes-cluster · arc-kubernetes-flux-configuration · arc-kubernetes-provisioned-cluster · arc-machine · arc-private-link-scope · arc-resource-bridge-appliance · databox-edge-device · digital-twins-endpoint-eventgrid · digital-twins-endpoint-eventhub · digital-twins-endpoint-servicebus · digital-twins-instance · digital-twins-time-series-database-connection · extended-location-custom-location · iotcentral-application · iotcentral-application-network-rule-set · iotcentral-organization · iothub · iothub-certificate · iothub-consumer-group · iothub-device-update-account · iothub-device-update-instance · iothub-dps · iothub-dps-certificate · iothub-dps-shared-access-policy · iothub-endpoint-cosmosdb-account · iothub-endpoint-eventhub · iothub-endpoint-servicebus-queue · iothub-endpoint-servicebus-topic · iothub-endpoint-storage-container · iothub-enrichment · iothub-fallback-route · iothub-file-upload · iothub-route · iothub-shared-access-policy · maps-account · stack-hci-cluster · stack-hci-deployment-setting · stack-hci-extension · stack-hci-logical-network · stack-hci-marketplace-gallery-image · stack-hci-network-interface · stack-hci-storage-path · stack-hci-virtual-hard-disk · system-center-virtual-machine-manager-availability-set · system-center-virtual-machine-manager-cloud · system-center-virtual-machine-manager-server · system-center-virtual-machine-manager-virtual-machine-instance · system-center-virtual-machine-manager-virtual-machine-instance-guest-agent · system-center-virtual-machine-manager-virtual-machine-template · system-center-virtual-machine-manager-virtual-network

Storage (47)
elastic-san · elastic-san-volume · elastic-san-volume-group · managed-disk · managed-disk-sas-token · managed-lustre-file-system · netapp-account · netapp-account-encryption · netapp-backup-policy · netapp-backup-vault · netapp-pool · netapp-snapshot · netapp-snapshot-policy · netapp-volume · netapp-volume-group-oracle · netapp-volume-group-sap-hana · qumulo-file-system · snapshot · storage-account · storage-account-customer-managed-key · storage-account-local-user · storage-account-network-rules · storage-account-queue-properties · storage-account-static-website · storage-account-table-properties · storage-blob · storage-blob-inventory-policy · storage-container · storage-container-immutability-policy · storage-data-lake-gen2-filesystem · storage-data-lake-gen2-path · storage-encryption-scope · storage-management-policy · storage-mover · storage-mover-agent · storage-mover-job-definition · storage-mover-project · storage-mover-source-endpoint · storage-mover-target-endpoint · storage-object-replication · storage-share-directory · storage-share-file · storage-sync · storage-sync-cloud-endpoint · storage-sync-group · storage-sync-server-endpoint · storage-table-entity

Backup & Disaster Recovery (35)
backup-container-storage-account · backup-policy-vm-workload · backup-protected-file-share · backup-protected-vm · data-protection-backup-instance-blob-storage · data-protection-backup-instance-data-lake-storage · data-protection-backup-instance-disk · data-protection-backup-instance-kubernetes-cluster · data-protection-backup-instance-mysql-flexible-server · data-protection-backup-instance-postgresql-flexible-server · data-protection-backup-policy-blob-storage · data-protection-backup-policy-data-lake-storage · data-protection-backup-policy-disk · data-protection-backup-policy-kubernetes-cluster · data-protection-backup-policy-mysql-flexible-server · data-protection-backup-policy-postgresql-flexible-server · data-protection-backup-vault · data-protection-backup-vault-customer-managed-key · data-protection-resource-guard · recovery-services-vault · recovery-services-vault-resource-guard-association · site-recovery-fabric · site-recovery-hyperv-network-mapping · site-recovery-hyperv-replication-policy · site-recovery-hyperv-replication-policy-association · site-recovery-network-mapping · site-recovery-protection-container · site-recovery-protection-container-mapping · site-recovery-replicated-vm · site-recovery-replication-policy · site-recovery-replication-recovery-plan · site-recovery-services-vault-hyperv-site · site-recovery-vmware-replicated-vm · site-recovery-vmware-replication-policy · site-recovery-vmware-replication-policy-association

DNS & IPAM (19)
dns-zone · private-dns-a-record · private-dns-aaaa-record · private-dns-cname-record · private-dns-mx-record · private-dns-ptr-record · private-dns-resolver · private-dns-resolver-dns-forwarding-ruleset · private-dns-resolver-forwarding-rule · private-dns-resolver-inbound-endpoint · private-dns-resolver-outbound-endpoint · private-dns-resolver-virtual-network-link · private-dns-srv-record · private-dns-txt-record · private-dns-zone · traffic-manager-azure-endpoint · traffic-manager-external-endpoint · traffic-manager-nested-endpoint · traffic-manager-profile

Identity & Access (11)
aadb2c-directory · active-directory-domain-service · federated-identity-credential · graph-services-account · marketplace-role-assignment · pim-active-role-assignment · pim-eligible-role-assignment · role-assignments · role-definition · role-management-policy · user-assigned-identity

Specialized Workloads (5)
healthcare-dicom-service · healthcare-fhir-service · healthcare-medtech-service · healthcare-service · healthcare-workspace

Prefix every entry with terraform-google-  ·  Browse all 201 repos →

Compute & Containers (146)
alloydb-cluster · apigee-api-product · apigee-api-proxy · apigee-app-group · apigee-control-plane-access · apigee-data-collector · apigee-developer · apigee-developer-app · apigee-endpoint-attachment · apigee-env-references · apigee-envgroup · apigee-envgroup-attachment · apigee-environment · apigee-environment-debugmask · apigee-environment-keyvaluemap · apigee-flowhook · apigee-instance · apigee-instance-attachment · apigee-keystore · apigee-organization · apigee-security-action · apigee-security-feedback · apigee-security-profile-v2 · apigee-sharedflow · apigee-space · apigee-sync-authorization · apigee-target-server · backend-service · bigquery-dataset · bigtable-instance · billing-budget · binary-authorization · ces-agent · ces-app · ces-app-root-agent-association · ces-app-version · ces-deployment · ces-example · ces-guardrail · ces-tool · ces-toolset · chronicle-custom-list · chronicle-dashboard-chart · chronicle-data-access-label · chronicle-data-access-scope · chronicle-data-table · chronicle-findings-refinement · chronicle-parser · chronicle-parser-extension · chronicle-reference-list · chronicle-retrohunt · chronicle-rule · chronicle-rule-deployment · chronicle-watchlist · cloud-function · cloud-router · cloud-run-service · cloud-scheduler-job · composer-environment · compute-http-health-check · compute-image · compute-instance · compute-instance-group · compute-interconnect-attachment · compute-node-group · compute-node-template · compute-reservation · compute-route · compute-target-pool · connectivity-test · dataflow-job · dataproc-cluster · datastream-connection-profile · datastream-private-connection · datastream-stream · dialogflow-conversation-profile · dialogflow-cx-agent · dialogflow-cx-entity-type · dialogflow-cx-environment · dialogflow-cx-flow · dialogflow-cx-generative-settings · dialogflow-cx-generator · dialogflow-cx-intent · dialogflow-cx-page · dialogflow-cx-playbook · dialogflow-cx-security-settings · dialogflow-cx-test-case · dialogflow-cx-tool · dialogflow-cx-version · dialogflow-cx-webhook · dialogflow-encryption-spec · dialogflow-sip-trunk · discovery-engine-chat-engine · discovery-engine-data-connector · discovery-engine-data-store · discovery-engine-recommendation-engine · discovery-engine-search-engine · discovery-engine-user-store · document-ai-processor · document-ai-processor-default-version · document-ai-schema · document-ai-warehouse-document-schema · document-ai-warehouse-location · endpoints-service · essential-contacts · filestore-instance · gke-cluster · global-address · health-check · iap-tunnel · instance-template · log-based-metric · log-sink · log-view · looker-instance · managed-instance-group · network-connectivity-hub · network-security-address-group · network-security-security-profile · network-security-security-profile-group · network-security-url-lists · network-services-authz-extension · network-services-grpc-route · network-services-http-route · network-services-mesh · network-services-service-binding · network-services-tcp-route · network-services-tls-route · project-services · pubsub-topic · resource-tags · secret-manager-secret · service-account · service-attachment · service-networking-connection · spanner-instance · vertex-ai-dataset · vertex-ai-deployment-resource-pool · vertex-ai-endpoint · vertex-ai-index · vertex-ai-index-endpoint · vertex-ai-index-endpoint-deployed-index · vertex-ai-tensorboard · vertex-ai-tensorboard-experiment · workforce-identity-federation · workload-identity-federation

Governance & Management (19)
apigee-addons-config · apigee-environment-addons-config · client-tls-policy · cloud-armor-policy · discovery-engine-acl-config · discovery-engine-cmek-config · discovery-engine-license-config · folder · network-security-authz-policy · network-security-gateway-security-policy · network-security-gateway-security-policy-rule · network-security-tls-inspection-policy · network-services-endpoint-policy · org-policy · scc-notification-config · server-tls-policy · ssl-policy · tag-bindings · vpc-flow-logs-config

Networking & Connectivity (8)
apigee-nat-address · chronicle-native-dashboard · cloud-vpn · http-load-balancer · shared-vpc · vpc-network · vpc-peering · vpc-service-controls

Storage (7)
apigee-datastore · compute-disk · compute-snapshot · storage-bucket · vertex-ai-featurestore · vertex-ai-featurestore-entitytype · vertex-ai-featurestore-entitytype-feature

Monitoring & Observability (6)
apigee-security-monitoring-condition · monitoring-alert-policy · monitoring-dashboard · monitoring-group · monitoring-notification-channel · monitoring-uptime-check

Security & Compliance (5)
certificate-authority · firewall-policy · kms-keyring · network-security-firewall-endpoint · network-security-firewall-endpoint-association

Identity & Access (4)
apigee-environment-iam-bindings · discovery-engine-search-engine-iam-bindings · project-iam-bindings · storage-bucket-iam-bindings

DNS & IPAM (2)
apigee-dns-zone · dns-zone

Developer Platform & DevOps (2)
artifact-registry-repository · chronicle-feed

Data & Databases (2)
cloud-sql-instance · redis-instance

Prefix every entry with terraform-aws-  ·  Browse all 137 repos →

Specialized Workloads (50)
amplify · api-gateway-v2 · appconfig · appflow · appmesh · appsync · bedrock · budgets · cloudformation · datazone · dax · detective · directory-service · dms · elastic-beanstalk · emr · fis · inspector2 · kinesis-firehose · kinesis-stream · lakeformation · lambda · license-manager · location · macie · managed-grafana · managed-prometheus · mq · msk · oam · opensearch · organizations · payment-cryptography · qldb · rbin · resource-explorer · rolesanywhere · service-catalog · service-discovery · service-quotas · sfn · shield · signer · ssm · timestream · verified-access · verified-permissions · workmail · workspaces · xray

Compute & Containers (22)
ami · api-gateway · autoscaling-group · batch · capacity-reservation · cognito · connect · ec2-instance · ecr · ecs-cluster · ecs-service · eks · eks-node-group · iot-core · launch-template · network-manager · placement-group · quicksight · rds · ses · transfer-family · vpc

Networking & Connectivity (11)
cloudfront · dx · elastic-ip · global-accelerator · lb · network-interface · transit-gateway · vpc-endpoint · vpc-lattice · vpc-peering · vpn

Security & Compliance (10)
acm · acm-pca · guardduty · kms · network-acl · network-firewall · secrets-manager · security-group · security-hub · wafv2

Identity & Access (8)
iam-account · iam-group · iam-identity-center · iam-identity-provider · iam-policy · iam-role · iam-user · key-pair

Storage (7)
backup · datasync · ebs-volume · efs · fsx · s3-bucket · storage-gateway

Data & Databases (7)
documentdb · dynamodb · elasticache · memorydb · neptune · rds-aurora · rds-proxy

Developer Platform & DevOps (6)
apprunner · codeartifact · codebuild · codecommit · codedeploy · codepipeline

Analytics & AI/ML (4)
athena · glue · redshift · sagemaker

Monitoring & Observability (4)
cloudtrail · cloudwatch-alarm · cloudwatch-dashboard · cloudwatch-log-group

Governance & Management (3)
config · cost-management · resource-groups

Integration & Messaging (3)
eventbridge · sns · sqs

DNS & IPAM (2)
route53-resolver · route53-zone

Prefix every entry with terraform-aci-  ·  Browse all 125 repos →

Networking & Connectivity (82)
any-vrf-contract · application-epg · application-profile · attachable-access-entity-profile · authentication · bgp-policies · bridge-domain · cloud-account · cloud-context-profile · cloud-domain-profile · cloud-epg · cloud-external-epg · cloud-external-network · cloud-l4-l7 · cloud-service-epg · cloud-vpn-gateway · contract · duo-provider-group · eigrp-policies · endpoint-tags · epg-useg · external-management-network · external-network-instance-profile · fabric-external-connection · fabric-node-member · fabric-wide-settings · fc-domain · fex-profile · filter · firmware · imported-contract · ip-address-pool · ip-sla · l2-domain · l2-outside · l3-domain · l3-outside · l3out-bfd · l3out-bgp · l3out-hsrp · l3out-ospf · l3out-path-attachment · l3out-static-route · l4-l7-device · l4-l7-redirect · l4-l7-service-graph-template · ldap · leaf-interface-profile · leaf-switch-profile · local-user · logical-device-context · login-domain · managed-node-connectivity-group · match-rule · multi-site · multicast-pool · netflow · node-management-epg · ospf-policies · out-of-band-contract · physical-domain · qos · radius · route-control-profile · rsa-provider · saml · security-domain · snmp · span · spine-interface-profile · spine-switch-profile · taboo-contract · tacacs · tenant · vlan-pool · vmm-domain · vpc-protection-group · vrf · vrf-fallback-route · vrf-leak-routes · vsan-pool · vxlan-pool

Governance & Management (36)
access-switch-policy-group · cdp-interface-policy · config-management · copp-interface-policy · dot1x-interface-policy · dwdm-interface-policy · endpoint-retention-policy · fabric-interface-policy · fibre-channel-interface-policy · first-hop-security-policy · igmp-snooping-policy · interface-config · l2-interface-policy · l3-interface-policy · lacp-policy · leaf-access-bundle-policy-group · leaf-access-port-policy-group · link-flap-interface-policy · link-flow-control-interface-policy · link-level-interface-policy · lldp-interface-policy · maintenance-policy · mcp-interface-policy · mld-snooping-policy · neighbor-discovery-interface-policy · no-drop-dscp-interface-policy · poe-interface-policy · port-security-policy · priority-flow-control-interface-policy · slow-drain-interface-policy · spanning-tree-interface-policy · spine-access-port-policy-group · synce-interface-policy · transceiver-interface-policy · trust-control-policy · vpc-domain-policy

Security & Compliance (3)
endpoint-security-group · firewall-policy · security-certificates

Compute & Containers (1)
cloud-application-container

Integration & Messaging (1)
dhcp-relay-policy

Monitoring & Observability (1)
monitoring-policy

Identity & Access (1)
pim-policies

Prefix every entry with terraform-fabric-  ·  Browse all 56 repos →

Analytics & AI/ML (43)
activator · anomaly-detector · apache-airflow-job · connection · copy-job · data-agent · digital-twin-builder · digital-twin-builder-flow · domain · domain-workspace-assignment · environment · eventhouse · eventstream · external-data-share · gateway · graphql-api · item-job-scheduler · kql-dashboard · kql-database · kql-queryset · lakehouse · map · mirrored-catalog · mirrored-database · ml-experiment · ml-model · mounted-data-factory · notebook · onelake-data-access-security · ontology · operations-agent · semantic-model · shortcut · spark-custom-pool · spark-job-definition · spark-workspace-settings · tenant-setting · variable-library · warehouse · workspace · workspace-git · workspace-outbound-cloud-connection-rules · workspace-outbound-gateway-rules

Data & Databases (3)
cosmos-db · sql-database · warehouse-sql-audit-settings

Developer Platform & DevOps (3)
data-pipeline · deployment-pipeline · report

Governance & Management (3)
folder · tag · workspace-git-outbound-policy

Storage (1)
warehouse-snapshot

Networking & Connectivity (1)
workspace-managed-private-endpoint

Integration & Messaging (1)
workspace-network-communication-policy

Identity & Access (1)
workspace-role-assignment

Prefix every entry with terraform-bigip-  ·  Browse all 37 repos →

Networking & Connectivity (33)
ltm-cipher-group · ltm-cipher-rule · ltm-datagroup · ltm-ifile · ltm-irule · ltm-node · ltm-persistence-profile-cookie · ltm-persistence-profile-dstaddr · ltm-persistence-profile-srcaddr · ltm-persistence-profile-ssl · ltm-pool · ltm-profile-bot-defense · ltm-profile-client-ssl · ltm-profile-fasthttp · ltm-profile-fastl4 · ltm-profile-ftp · ltm-profile-http · ltm-profile-http2 · ltm-profile-httpcompress · ltm-profile-oneconnect · ltm-profile-rewrite · ltm-profile-server-ssl · ltm-profile-tcp · ltm-profile-web-acceleration · ltm-request-log-profile · ltm-snat · ltm-snatpool · ltm-virtual-server · net-ike-peer · net-route · net-selfip · net-tunnel · net-vlan

Monitoring & Observability (3)
gtm-monitor-http · gtm-monitor-tcp · ltm-monitor

Governance & Management (1)
ltm-policy

Prefix every entry with terraform-azuredevops-  ·  Browse all 29 repos →

Developer Platform & DevOps (28)
agent-pool · boards · branch-policies · build-definition · deployment-group · entitlements · environment · extension · feed · git-repository · group · permissions · pipeline-checks · project · repository-policies · serviceendpoint-artifacts · serviceendpoint-azure · serviceendpoint-containers · serviceendpoint-generic · serviceendpoint-permissions · serviceendpoint-scm · serviceendpoint-security · servicehook · team · variable-group · wiki · workitem · workitem-process

Identity & Access (1)
securityrole-assignment

Prefix every entry with terraform-dynatrace-  ·  Browse all 29 repos →

Monitoring & Observability (26)
alerting-profile · ansible-tower-notification · autotag · dashboard · dashboard-sharing · dashboards-allowlist · dashboards-general · dashboards-presets · direct-shares · document · email-notification · jira-notification · json-dashboard · json-dashboard-base · management-zone · management-zone-permission · ops-genie-notification · pagerduty-notification · process-monitoring · process-monitoring-rule · servicenow-notification · slack-notification · trello-notification · victorops-notification · webhook-notification · xmatters-notification

Storage (2)
disk-analytics · disk-options

Compute & Containers (1)
host-anomalies

Prefix every entry with terraform-snowflake-  ·  Browse all 28 repos →

Data & Databases (14)
api-integration-amazon-api-gateway · api-integration-google-cloud-api-gateway · database · external-volume · notification-integration · schema · share · stage-external-azure · stage-external-gcs · stage-internal · stream · task · user · warehouse

Storage (5)
stage-external-s3 · stage-external-s3-compatible · storage-integration-aws · storage-integration-azure · storage-integration-gcs

Governance & Management (4)
masking-policy · network-policy · row-access-policy · tag

Identity & Access (3)
database-role-grant-bundle · role · role-grant-bundle

Integration & Messaging (1)
api-integration-azure-api-management

Monitoring & Observability (1)
resource-monitor

Prefix every entry with terraform-databricks-  ·  Browse all 27 repos →

Analytics & AI/ML (18)
catalog · cluster · external-location · grants · group · instance-pool · job · metastore · metastore-assignment · mlflow-experiment · model-serving-endpoint · permissions · schema · secret-scope · service-principal · vector-search-endpoint · volume · workspace-conf

Data & Databases (3)
sql-alert · sql-query · sql-warehouse

Governance & Management (2)
budget-policy · cluster-policy

Developer Platform & DevOps (2)
pipeline · repo

Networking & Connectivity (1)
notification-destination

Storage (1)
storage-credential

Prefix every entry with terraform-grafana-  ·  Browse all 27 repos →

Monitoring & Observability (20)
adaptive-metrics-exemption · adaptive-metrics-rule · adaptive-metrics-ruleset · adaptive-metrics-segment · alerting-contact-point · alerting-rule-group · cloud-stack · dashboard · data-source · fleet-management-collector · frontend-observability-app · library-panel · oncall-integration · organization · playlist · service-account · sso-settings · synthetic-monitoring-check · team · user

Governance & Management (5)
adaptive-metrics-policy · adaptive-metrics-recommendations-config · alerting-notification-policy · cloud-access-policy · folder

Developer Platform & DevOps (1)
fleet-management-pipeline

Identity & Access (1)
role

Prefix every entry with terraform-github-  ·  Browse all 25 repos →

Developer Platform & DevOps (25)
actions-hosted-runner · actions-organization · actions-repository · actions-runner-group · app-installation · branch-protection · codespaces · custom-properties · dependabot · enterprise · enterprise-actions · issue-standards · membership · organization-roles · organization-ruleset · organization-settings · organization-webhook · repository · repository-collaborators · repository-environment · repository-files · repository-ruleset · repository-webhook · team · team-sync-group-mapping

Prefix every entry with terraform-msgraph-  ·  Browse all 23 repos →

Identity & Access (17)
access-package · access-package-catalog · administrative-unit · app-role-assignment · application · device-configuration-assignment · device-configuration-profile · directory-role-assignment · group · group-membership · group-owner · named-location · pim-eligible-role-assignment · service-principal · team · team-channel · user

Governance & Management (6)
access-package-assignment-policy · authentication-strength-policy · authorization-policy · conditional-access-policy · device-compliance-policy · identity-security-defaults-policy

Prefix every entry with terraform-cloudflare-  ·  Browse all 22 repos →

Networking & Connectivity (18)
account-member · api-token · dnssec · email-routing · load-balancer · load-balancer-pool · page-rule · r2-bucket · ruleset · spectrum-application · turnstile-widget · waiting-room · workers-kv-namespace · workers-script · zero-trust-access-application · zero-trust-access-group · zero-trust-tunnel-cloudflared · zone

Security & Compliance (1)
certificate-pack

Compute & Containers (1)
custom-hostname

DNS & IPAM (1)
dns-record

Governance & Management (1)
notification-policy

Prefix every entry with terraform-kubernetes-  ·  Browse all 21 repos →

Compute & Containers (16)
cron-job · daemon-set · deployment · horizontal-pod-autoscaler · ingress · job · limit-range · namespace · persistent-volume-claim · pod-disruption-budget · priority-class · resource-quota · secret · service · service-account · stateful-set

Governance & Management (2)
config-map · network-policy

Identity & Access (2)
role · role-binding

Storage (1)
storage-class

Prefix every entry with terraform-power-platform-  ·  Browse all 21 repos →

Developer Platform & DevOps (15)
admin-management-application · connection · connection-share · environment · environment-application-admin · environment-application-package-install · environment-group · environment-group-rule-set · environment-settings · environment-wave · managed-environment · solution · tenant-capacity · tenant-settings · user

Governance & Management (5)
billing-policy · billing-policy-environment · data-loss-prevention-policy · enterprise-policy · tenant-isolation-policy

Monitoring & Observability (1)
copilot-studio-application-insights

Prefix every entry with terraform-f5os-  ·  Browse all 20 repos →

Networking & Connectivity (18)
auth · interface · lag · license · logging · ntp-server · partition · partition-change-password · primarykey · qkview · snmp · system · tenant · tenant-image · tls-cert-key · user · user-password-change · vlan

Governance & Management (1)
config-backup

DNS & IPAM (1)
dns

Prefix every entry with terraform-vsphere-  ·  Browse all 20 repos →

Compute & Containers (6)
compute-cluster · guest-os-customization · host · resource-pool · vapp · virtual-machine

Storage (5)
content-library · datastore-cluster · nas-datastore · virtual-machine-snapshot · vmfs-datastore

Governance & Management (4)
datacenter · folder · tag · vm-storage-policy

Networking & Connectivity (3)
distributed-port-group · distributed-virtual-switch · host-port-group

Identity & Access (2)
entity-permissions · role

Prefix every entry with terraform-azuread-  ·  Browse all 19 repos →

Identity & Access (14)
access-package · access-package-catalog · administrative-unit · custom-directory-role · directory-role · group · invitation · named-location · pim-group · service-principal · synchronization · token-policies · user · user-flow-attribute

Governance & Management (4)
auth-strength-policy · claims-mapping-policy · conditional-access-policy · permission-grant-policy

Compute & Containers (1)
application

Prefix every entry with terraform-servicenow-  ·  Browse all 19 repos →

IT Service Management (18)
application · business-rule · client-script · connection · credential · group · notification · portal-widget · rest-message · scheduled-job · script-include · scripted-rest-api · service-catalog · system-property · table · transform-map · ui-page · user

Identity & Access (1)
role

Prefix every entry with terraform-infoblox-  ·  Browse all 15 repos →

DNS & IPAM (15)
dns-records · dns-view · dtc · ip-allocation · ipv4-fixed-address · ipv4-network · ipv4-network-container · ipv4-range · ipv4-shared-network · ipv6-network · ipv6-network-container · network-view · zone-auth · zone-delegated · zone-forward

Prefix every entry with terraform-azapi-  ·  Browse all 4 repos →

Specialized Workloads (4)
data-plane-resource · resource · resource-action · update-resource

Prefix every entry with terraform-helm-  ·  Browse all 2 repos →

Compute & Containers (2)
release · template

The heaviest hitters in the library — deep, composite modules that put an entire service estate behind one clean boundary. Ranked by complexity score (resources×3 + variables + outputs + code_lines/50).

Every one of the 1,071 repositories follows the same predictable layout, so consuming any module feels identical to consuming any other.

terraform-<provider>-<resource>/
├── main.tf          # Primary resource definitions
├── variables.tf     # Typed inputs with defaults + validation
├── outputs.tf       # Exported attributes for composition
├── providers.tf     # Required providers and version pins
├── README.md        # Usage, inputs, outputs, examples
├── SCOPE.md         # Explicit in-scope / out-of-scope boundary
├── .gitignore       # State, crash logs, .terraform/
└── examples/        # Reference implementations (where applicable)
    └── main.tf

Reference any module from this organization and pin it to a released tag.

module "resource_group" {
  source = "git::https://github.com/microsoftexpert/terraform-azurerm-resource-group.git?ref=v1.0.0"

  name     = "rg-platform-prod-eastus"
  location = "eastus"

  tags = {
    environment = "production"
    cost_center = "platform-engineering"
    managed_by  = "terraform"
  }
}

Every module is checked the same way, and it is worth being precise about what that does and does not establish.

What is verified. Each module passes terraform init -backend=false, terraform validate and terraform fmt. Its inputs are compared field by field against the provider's own source code — not just the published schema, which omits force-new behaviour, item-count bounds, conflicting-argument rules and the real content of validation functions. Documented limits are checked against the vendor's published documentation, because a provider bound and a service bound are not the same thing and either can be the narrower one. A continuous check re-runs the whole battery so that corrections cannot quietly regress.

What is not verified. None of these modules has been applied to create a real resource. Quotas, regional capacity, policy assignments, feature registrations and RBAC are all invisible to static analysis. So a module is known to be internally correct and faithful to its provider; it is not known to produce a working resource in your subscription.

For the 903 Azure (azurerm) modules there is a dedicated caveats page recording what the library cannot fix — services that are retired or closed to new deployments, places where the provider is stricter than Azure, limits that are reported rather than enforced, and the settings only you can configure:

📄 Azure module caveats