terraform-azure-verified-modules

Follow the AVM Terraform requirements covering provider constraints, code style, variables, outputs, and testing. Key rules include pinning azurerm to ~> 4.0 or azapi to ~> 2.0, using lower snake_case, defining precise variable types, and generating docs with terraform-docs.

AVM modules must use azurerm version >= 4.0 and < 5.0, or azapi version >= 2.0 and < 3.0, declared in a required_providers block. Pessimistic constraints like ~> 4.0 are recommended, and no other providers are permitted.

No. AVM modules must reference other modules only through the HashiCorp Terraform registry with a pinned version, such as source = "Azure/xxx/azurerm" with version = "1.2.3". Git references and non-AVM module references are prohibited.

Conditional nested blocks must use a dynamic block with for_each set to a condition producing a single-element list or empty list, such as for_each = condition ? [item] : []. This avoids plan-stage errors with unknown values.

Breaking changes include adding resources without feature toggles, renaming resources without moved blocks, changing variable types or defaults, deleting outputs, and switching between count and for_each. New resources in minor versions must be gated behind a toggle variable defaulting to false.