RU-based Azure Cosmos DB for MongoDB

 hclresource "azurerm_resource_group" "main" {
  name     = "myproject-data-prod"
  location = "westus2"
}

resource "azurerm_user_assigned_identity" "mongodb" {
  name                = "myproject-mongodb-prod"
  location            = "westus2"
  resource_group_name = azurerm_resource_group.main.name
}

module "mongodb" {
  source  = "solutions.corewide.com/azure/tf-azure-cosmosdb-mongo-ru/azurerm"
  version = "~> 1.0"

  name                                  = "myproject-prod"
  region                                = azurerm_user_assigned_identity.mongodb.location
  resource_group_name                   = azurerm_resource_group.main.name
  engine_version                        = "7.0"
  total_throughput_limit                = -1
  public_network_access_enabled         = false
  bypass_network_acl_for_azure_services = false
  extra_capabilities                    = ["EnableMongo16MBDocumentSupport"]
  subnet_whitelist                      = ["/subscriptions/xxxyyyzzz/resourceGroups/MyResourceGroup/providers/Microsoft.Network/virtualNetworks/myproject/subnets/myproject-production"]
  ip_range_whitelist                    = ["xx.xx.xx.xx/32"]
  network_acl_bypass_ids                = ["xxx-yyy-zzz"]

  consistency_policy = {
    level                   = "BoundedStaleness"
    max_interval_in_seconds = 300
    max_staleness_prefix    = 100000
  }

  data_location = [
    {
      location          = "westus2"
      failover_priority = 0
    },
    {
      location          = "westus3"
      failover_priority = 1
    },
  ]

  identity = {
    type = "UserAssigned"
    ids  = [azurerm_user_assigned_identity.mongodb.id]
  }

  databases = [
    {
      name       = "myapp"
      throughput = 400

      users = [
        {
          name      = "myapp_ro"
          password  = "read_user_password"
          role_name = "read"
        },
        {
          name      = "myapp_owner"
          role_name = "dbOwner"
        },
      ]
    },
    {
      name           = "myapp_secondary"
      max_throughput = 1000

      users = [
        {
          name      = "myapp_secondary_admin"
          role_name = "dbAdmin"
        },
      ]
    },
  ]

  backup = {
    type                = "Periodic"
    interval_in_minutes = 1440
    retention_in_hours  = 200
    storage_redundancy  = "Geo"
  }

  tags = {
    Project     = "myproject"
    Environment = "prod"
  }
}