You're done. We're on it.

1 — Register Azure resource providers

Run once per subscription. These enable the Azure services Sovereign needs.

az provider register --namespace Microsoft.App
az provider register --namespace Microsoft.ContainerService
az provider register --namespace Microsoft.KeyVault
az provider register --namespace Microsoft.Storage
az provider register --namespace Microsoft.OperationalInsights
az provider register --namespace Microsoft.Insights
az provider register --namespace Microsoft.Network
az provider register --namespace Microsoft.Cdn
# Wait ~2 min for registration to complete:
az provider show --namespace Microsoft.App --query registrationState

2 — Get your deployer Object ID

Your Object ID is the GUID identifying you in Azure AD. It goes in deployer_object_id in the tfvars below.

# For your personal login:
az ad signed-in-user show --query id -o tsv

# For a service principal:
az ad sp show --id <APP_ID> --query id -o tsv

3 — Create a remote state backend (strongly recommended)

Stores your Terraform state securely in Azure Blob Storage. See backend.tf.example inside the ZIP for exact instructions. Skip only for a quick proof-of-concept.

az group create --name sovereign-tf-state-rg --location eastus2
az storage account create \
  --name sovereigntfstate$RANDOM \
  --resource-group sovereign-tf-state-rg \
  --sku Standard_LRS --allow-blob-public-access false
az storage container create \
  --account-name <storage_account_name> --name tfstate