# Auth: the provider uses your active `az login` session by default.
# Set `ARM_*` env vars (ARM_CLIENT_ID, ARM_CLIENT_SECRET, ARM_TENANT_ID,
# ARM_SUBSCRIPTION_ID) to override with a service principal in CI.
#
# The `features {}` block is required by azurerm even when empty.

provider "azurerm" {
  subscription_id = var.subscription_id
  tenant_id       = var.tenant_id != "" ? var.tenant_id : null

  features {
    resource_group {
      prevent_deletion_if_contains_resources = false
    }
  }
}