# fail
# ruleid: azure-synapse-workscape-enables-managed-virtual-network
resource "azurerm_synapse_workspace" "example" {
    name                                 = "example"
    resource_group_name                  = azurerm_resource_group.example.name
    location                             = azurerm_resource_group.example.location
    storage_data_lake_gen2_filesystem_id = azurerm_storage_data_lake_gen2_filesystem.example.id
    sql_administrator_login              = "sqladminuser"
    sql_administrator_login_password     = "H@Sh1CoR3!"
    managed_virtual_network_enabled      = false
    aad_admin {
    login     = "AzureAD Admin"
    object_id = "00000000-0000-0000-0000-000000000000"
    tenant_id = "00000000-0000-0000-0000-000000000000"
    }

    tags = {
    Env = "production"
    }
}

# fail
# ruleid: azure-synapse-workscape-enables-managed-virtual-network
resource "azurerm_synapse_workspace" "example" {
    name                                 = "example"
    resource_group_name                  = azurerm_resource_group.example.name
    location                             = azurerm_resource_group.example.location
    storage_data_lake_gen2_filesystem_id = azurerm_storage_data_lake_gen2_filesystem.example.id
    sql_administrator_login              = "sqladminuser"
    sql_administrator_login_password     = "H@Sh1CoR3!"
    aad_admin {
    login     = "AzureAD Admin"
    object_id = "00000000-0000-0000-0000-000000000000"
    tenant_id = "00000000-0000-0000-0000-000000000000"
    }

    tags = {
    Env = "production"
    }
}

# pass
resource "azurerm_synapse_workspace" "example" {
    name                                 = "example"
    resource_group_name                  = azurerm_resource_group.example.name
    location                             = azurerm_resource_group.example.location
    storage_data_lake_gen2_filesystem_id = azurerm_storage_data_lake_gen2_filesystem.example.id
    sql_administrator_login              = "sqladminuser"
    sql_administrator_login_password     = "H@Sh1CoR3!"
    managed_virtual_network_enabled      = true                
    aad_admin {
    login     = "AzureAD Admin"
    object_id = "00000000-0000-0000-0000-000000000000"
    tenant_id = "00000000-0000-0000-0000-000000000000"
    }

    tags = {
    Env = "production"
    }
}