I managed to store the terraform status file in an Azure storage container and enter it via the backend. It works. Then I found this article: HashiCorp Terraform implementation · HeartAI
For an enterprise application, access to the storage should of course be as secure as possible. So far I have restricted access to the container with
allow_blob_public_access = false
and ip_rules. Is it possible to access the tfstate container via a private link? I did it like in the article but the access is still like this: terraform apply →
azurerm_storage_container.tfstate****: Refreshing state… [id=https://tfstate*****.blob.core.windows.net/tfstate****]
In my opinion it should be more like this:
azurerm_storage_container.tfstate****: Refreshing state… [id=https://tfstate*****.privatelink.blob.core.windows.net/tfstate****]
It seems that the blob.core.windows.net is hardcoded. Is that correct?