firewall
claranet/firewall/azurerm
Terraform module for Azure Firewall
Azure Firewall     Common Azure module to generate an Azure Firewall and its dedicated subnet. Global versioning rule for Claranet Azure modules | Module version | Terraform version | OpenTofu version | AzureRM version | | -------------- | ----------------- | ---------------- | --------------- | | >= 8.x.x | Unverified | 1.8.x | >= 4.0 | | >= 7.x.x | 1.3.x | | >= 3.0 | | >= 6.x.x | 1.x | | >= 3.0 | | >= 5.x.x | 0.15.x | | >= 2.0 | | >= 4.x.x | 0.13.x / 0.14.x | | >= 2.0 | | >= 3.x.x | 0.12.x | | >= 2.0 | | >= 2.x.x | 0.12.x | | < 2.0 | | < 2.x.x | 0.11.x | | < 2.0 | Contributing If you want to contribute to this repository, feel free to
| Name | Type | Description | Default |
|---|---|---|---|
| logs_destinations_ids | list(string) | List of destination resources IDs for logs diagnostic destination. Can be `Stora | |
| environment | string | Project environment. | |
| client_name | string | Client name/account used in naming. | |
| subnet_cidr | string | The address prefix to use for the firewall's subnet. | |
| location | string | Azure region to use. | |
| resource_group_name | string | Resource group name. | |
| virtual_network_name | string | Name of the vnet attached to the firewall. | |
| location_short | string | Short string for Azure location. | |
| stack | string | Project stack name. | |
| logs_categories | list(string) | Log categories to send to destinations. | null |
| public_ip_custom_name | string | Custom name for the public IP. | null |
| additional_public_ips | list(object({ name | List of additional public ips' ids to attach to the firewall. | [] |
| zones | list(number) | Optional - Specifies a list of Availability Zones in which this Azure Firewall s | null |
| public_ip_ddos_protection_mode | string | The DDoS protection mode to use for the firewall's public address. | "VirtualNetworkInherited" |
| custom_name | string | Optional custom firewall name. | "" |
| application_rule_collections | list(object({ name = s | Create an application rule collection. | null |
| firewall_policy_id | string | Attach an existing firewall policy to this firewall. Cannot be used in conjuctio | null |
| subnet_default_outbound_access_enabled | bool | Whether to allow default outbound traffic from the subnet. | false |
| name_prefix | string | Optional prefix for the generated name. | "" |
| nat_rule_collections | list(object({ name = s | Create a NAT rule collection. | null |
| dns_servers | list(string) | DNS Servers to use with Azure Firewall. Using this also activate DNS Proxy. | null |
| default_tags_enabled | bool | Option to enable or disable default tags. | true |
| network_rule_collections | list(object({ name = s | Create a network rule collection. | null |
| deploy_log_workbook | bool | Deploy Azure Workbook Log in log analytics workspace. See [documentation](https: | true |
| sku_tier | string | SKU tier of the Firewall. Possible values are `Premium` and `Standard`. | "Standard" |
| ip_configuration_name | string | Name of the ip_configuration block. See [documentation](https://www.terraform.io | "ip_configuration" |
| private_ip_ranges | list(string) | A list of SNAT private CIDR IP ranges, or the special string `IANAPrivateRanges` | null |
| logs_metrics_categories | list(string) | Metrics categories to send to destinations. | null |
| name_suffix | string | Optional suffix for the generated name. | "" |
id — Firewall generated ID.name — Firewall name.subnet_id — ID of the subnet attached to the firewall.private_ip_address — Firewall private IP.public_ip_address — Firewall public IP.resource — Azure Firewall resource object.resource_network_rule_collection — Azure Firewall network rule collection resource object.resource_nat_rule_collection — Azure Firewall NAT rule collection resource object.resource_application_rule_collection — Azure Firewall application rule collection resource object.resource_public_ip — Azure Firewall public IP resource object.module_subnet — Subnet module object.diagnostic_settings — Diagnostic settings module object.Azure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,