AzureRM basic sample (#327)

* aoai template

* azurerm basic sample

* update one at a time

Author: deeikele

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/README.md

@@ -0,0 +1,103 @@
+---
+description: This set of templates demonstrates how to set up Azure AI Foundry in the basic configuration with public network setup and Microsoft-managed storage resources using AzureRM provider.
+page_type: sample
+products:
+- azure
+- azure-resource-manager
+urlFragment: foundry-basic
+languages:
+- hcl
+---
+
+# Azure AI Foundry: Basic setup with public networking (AzureRM)
+ 
+## Key Information
+  
+This infrastructure-as-code (IaC) solution deploys Azure AI Foundry with public networking and uses Microsoft-managed storage for file upload experience. It supports getting started scenarios, for typically non-enterprise scenarios. This variant shows AzureRM Terraform provider.
+
+## Prerequisites
+
+1. **Active Azure subscription(s) with appropriate permissions**
+  It's recommended to deploy these templates through a deployment pipeline associated to a service principal or managed identity with sufficient permissions over the the workload subscription (such as Owner or Role Based Access Control Administrator and Contributor). If deployed manually, the permissions below should be sufficient.
+
+  - **Workload Subscription**
+    - **Role Based Access Control Administrator**: Needed over the resource group to create the relevant role assignments
+    - **Network Contributor**: Needed over the resource group to create virtual network and Private Endpoint resources
+    - **Azure AI Account Owner**: Needed to create a cognitive services account and project 
+    - **Owner or Role Based Access Administrator**: Needed to assign RBAC to the required resources (Cosmos DB, Azure AI Search, Storage) 
+    - **Azure AI User**: Needed to create and edit agents
+
+2. **Register Resource Providers**
+
+   ```bash
+   az provider register --namespace 'Microsoft.CognitiveServices'
+   ```
+
+3. Sufficient quota for all resources in your target Azure region
+
+4. Azure CLI installed and configured on your local workstation or deployment pipeline server
+
+5. Terraform CLI version v1.11.4 or later on your local workstation or depoyment pipeline server. This template requires the usage of both the AzureRm and AzApi Terraform providers.
+
+### Variables
+
+The variables listed below [must be provided](https://developer.hashicorp.com/terraform/language/values/variables#variable-definition-precedence) when performing deploying the templates. The file example.tfvars provides a sample Terraform variables file that can be used.
+
+- **location** - The Azure region the resources will be deployed to. This must be the same region where the pre-existing virtual network has been deployed to.
+
+The variables listed below are optional and if not specified will use the defaults as included in the variables.tf file.
+
+## Deploy the Terraform template
+
+1. Fill in the required information for the variables listed in the example.tfvars file and rename the file to terraform.tfvars.
+
+2. If performing the deployment interactively, log in to Az CLI with a user that has sufficient permissions to deploy the resources.
+
+```bash
+az login
+```
+
+3. Ensure the proper environmental variables are set for [AzApi](https://registry.terraform.io/providers/Azure/azapi/latest/docs) and [AzureRm](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs) providers. At a minimum, you must set the ARM_SUBSCRIPTION_ID environment variable to the subscription the resoruces will be deployed to. You can do this with the commands below:
+
+Linux/MacOS
+```bash
+export ARM_SUBSCRIPTION_ID="YOUR_SUBSCRIPTION_ID"
+terraform apply
+```
+
+Windows
+```cmd
+set ARM_SUBSCRIPTION_ID="YOUR_SUBSCRIPTION_ID"
+terraform apply
+```
+
+4. Initialize Terraform
+
+```bash
+terraform init
+```
+
+5. Deploy the resources
+```bash
+terraform apply
+```
+
+## Module Structure
+
+```text
+code/
+├── data.tf                                         # Creates data objects for active subscription being deployed to and deployment security context
+├── locals.tf                                       # Creates local variables for project GUID
+├── main.tf                                         # Main deployment file        
+├── outputs.tf                                      # Placeholder file for future outputs
+├── providers.tf                                    # Terraform provider configuration 
+├── example.tfvars                                  # Sample tfvars file
+├── variables.tf                                    # Terraform variables
+├── versions.tf                                     # Configures minimum Terraform version and versions for providers
+```
+
+
+## References
+
+- [Learn more about Azure AI Foundry architecture](https://learn.microsoft.com/en-us/azure/ai-foundry/concepts/architecture)
+- [Azure AI Foundry reference docs for Terraform](https://learn.microsoft.com/en-us/azure/ai-foundry/how-to/create-resource-terraform)

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/code/data.tf

@@ -0,0 +1 @@
+

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/code/example.tfvars

@@ -0,0 +1 @@
+location = "eastus"

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/code/main.tf

@@ -0,0 +1,63 @@
+## Create a random string
+## 
+resource "random_string" "unique" {
+  length      = 5
+  min_numeric = 5
+  numeric     = true
+  special     = false
+  lower       = true
+  upper       = false
+}
+
+## Create a resource group for the resources to be stored in
+##
+resource "azurerm_resource_group" "rg" {
+  name     = "rg-aifoundry${random_string.unique.result}"
+  location = var.location
+}
+
+## Create an AI Foundry resource
+##
+
+resource "azurerm_cognitive_account" "ai_foundry" {
+  name                = "aifoundry${random_string.unique.result}"
+  location            = var.location
+  resource_group_name = azurerm_resource_group.rg.name
+  kind                = "AIServices"
+
+  identity {
+    type = "SystemAssigned"
+  }
+
+  sku_name = "S0"
+
+  # required for stateful development in Foundry including agent service
+  custom_subdomain_name = "aifoundry${random_string.unique.result}"
+  project_management_enabled = true
+
+  tags = {
+    Acceptance = "Test"
+  }
+}
+
+## Create a deployment for OpenAI's GPT-4o in the AI Foundry resource
+##
+resource "azurerm_cognitive_deployment" "aifoundry_deployment_gpt_4o" {
+  depends_on = [
+    azurerm_cognitive_account.ai_foundry
+  ]
+
+  name                 = "gpt-4o"
+  cognitive_account_id = azurerm_cognitive_account.ai_foundry.id
+
+  sku {
+    name     = "GlobalStandard"
+    capacity = 1
+  }
+
+  model {
+    format  = "OpenAI"
+    name    = "gpt-4o"
+    version = "2024-11-20"
+  }
+}

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/code/outputs.tf

@@ -0,0 +1,8 @@
+# Setup providers
+provider "azapi" {
+}
+
+provider "azurerm" {
+  features {}
+  storage_use_azuread = true
+}

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/code/providers.tf

@@ -0,0 +1,4 @@
+variable "location" {
+  description = "The name of the location to provision the resources to"
+  type        = string
+}

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/code/variables.tf

@@ -0,0 +1,20 @@
+# Configure the AzApi and AzureRM providers
+terraform {
+  required_providers {
+    azapi = {
+      source  = "azure/azapi"
+      version = "~> 2.5"
+    }
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "~> 4.37"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.7"
+    }
+  }
+  required_version = ">= 1.10.0, < 2.0.0"
+  # Uncomment to store state in Azure Storage
+  # backend "azurerm" {}
+}

samples/microsoft/infrastructure-setup-terraform/00-basic-azurerm/code/versions.tf

@@ -24,7 +24,7 @@ resource "azurerm_resource_group" "rg" {
 resource "azapi_resource" "ai_foundry" {
   type                      = "Microsoft.CognitiveServices/accounts@2025-06-01"
   name                      = "aifoundry${random_string.unique.result}"
-  parent_id                 = azurerm_resource_group.rg.id
+  parent_id                 = azurerm_resource_group.rg.name
   location                  = var.location
   schema_validation_enabled = false