feat(subscription): optional use of AzAPI for Subscription creation

[danwatco]

Overview/summary

This PR adds functionality to create a subscription using the azapi_resource resource type rather than using azurerm_subscription. This is useful in situations where the principal running Terraform doesn't have access to the default management group where subscriptions are created. By using the API, we can provide the managementGroupId parameter and the subscription is then created in the provided management group, avoiding the need to have creation permissions underneath the default management group.

Written unit and deployment tests (feedback welcome, my first time writing Go tests). Unable to run deployment tests so needs some testing there.

Testing evidence

There is some concerns that the management group association may cause an import error but yet to be tested.

As part of this pull request I have

• Checked for duplicate Pull Requests
• Associated it with relevant issues, for tracking and closure.
• Run and make fmt & make docs to format your code and update documentation.
• Created unit and deployment tests and provided evidence.
• Updated relevant and associated documentation.

[matt-FFFFFF]

Thanks @danwatco this looks great. Appreciate you taking the time to create some tests too.

I think one scenario that needs to be tested with deployment tests is one of using AzAPI to create the subscription alias and then AzureRM to manage the management group association.

If you are happy to copy one of the other deployment tests in the subscription submodule then feel free to modify that, if not I can do it.

[danwatco]

Thanks @danwatco this looks great. Appreciate you taking the time to create some tests too.

I think one scenario that needs to be tested with deployment tests is one of using AzAPI to create the subscription alias and then AzureRM to manage the management group association.

If you are happy to copy one of the other deployment tests in the subscription submodule then feel free to modify that, if not I can do it.

Have had a shot here - feel free to change/update

[jaredfholgate]

@luke-taylor You don't need this block if using AzAPI, so you can count = 0 it.

[matt-FFFFFF]

Thanks for this @danwatco - @luke-taylor has implemented this in #253