Azure to STACKIT
This guide describes the path from an Azure Terraform estate to a reviewable STACKIT migration package. Azure input maturity is stated in Supported source formats; run stacktoit version to see it for your build.
Assess the Terraform estate
Section titled “Assess the Terraform estate”stacktoit assess ./azure-terraformStackToIT reads Terraform and OpenTofu root modules written with the azurerm or azapi provider. It does not connect to an Azure account.
Understand the mapping
Section titled “Understand the mapping”Each resource gets a classification, a proposed target and a reason. The treatment depends on the configuration of the resource.
| Azure | STACKIT target | Usual classification |
|---|---|---|
| Linux and Windows virtual machines | Compute Engine | RECONFIGURE |
| Azure Kubernetes Service | Kubernetes Engine (SKE) | REPLATFORM |
| Azure Database for PostgreSQL | PostgreSQL Flex | REPLATFORM |
| Azure SQL, SQL Managed Instance | SQLServer Flex | REPLATFORM |
| Storage accounts | Object Storage | REPLATFORM |
| Key Vault | Secrets Manager and KMS | RECONFIGURE |
| Azure Cache for Redis | Key Value Store (Valkey) | RECONFIGURE |
| Service Bus | RabbitMQ | REPLATFORM |
| App Service, Functions | Cloud Foundry or SKE | REPLATFORM or CONTAINERIZE |
| Cosmos DB | MongoDB Flex or PostgreSQL Flex (JSONB) | REPLATFORM or REDESIGN |
| Azure Firewall | Decided by an architect | MANUAL_REVIEW |
Review database access
Section titled “Review database access”Read the network block of each database in terraform/. When the source is private or not proven public, the endpoint scope is a decision: left unset, the STACKIT API makes the endpoint PUBLIC. Decide the scope for each such database before you apply anything, and list its clients in the _allowed_cidrs variable.
Review governance
Section titled “Review governance”Management groups map to STACKIT folders. Policy assignments have no managed counterpart, so plan them as policy as code in your delivery pipeline.
Review target and execution artifacts
Section titled “Review target and execution artifacts”- Open
index.htmland inspect the architecture and decision findings. - Review
terraform/andtarget-plan.jsonwith the target platform team. - Read
execution-plan.jsonandexecution/for sequencing, prerequisites and operator actions.
Source prices are available for AWS only. For an Azure source, the cost view does not state a comparison with Azure prices.
Continue with Review migration decisions.