Tips-Of-Mine/terraform-azure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update files

Browse Source
This commit is contained in:
cshea15 2023-09-25 10:39:55 -04:00
parent 02691ea927
commit 06cb833672
1 changed files with 45 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
quickstart/201-azfw-with-avzones/main.tf
View File

@ -30,6 +30,7 @@ resource "azurerm_public_ip" "pip_azfw" {
resource_group_name = azurerm_resource_group.rg.name resource_group_name = azurerm_resource_group.rg.name
allocation_method = "Static" allocation_method = "Static"
sku = "Standard" sku = "Standard"
zones = [ "1", "2", "3" ]
} }
resource "azurerm_storage_account" "sa" { resource "azurerm_storage_account" "sa" {
@ -135,7 +136,7 @@ resource "azurerm_network_interface_security_group_association" "vm_jump_nsg_ass
network_security_group_id = azurerm_network_security_group.vm_jump_nsg.id network_security_group_id = azurerm_network_security_group.vm_jump_nsg.id
} }
resource "azurerm_linux_virtual_machine" "vm_server" { resource "azurerm_windows_virtual_machine" "vm_server" {
name = "server-vm" name = "server-vm"
resource_group_name = azurerm_resource_group.rg.name resource_group_name = azurerm_resource_group.rg.name
location = azurerm_resource_group.rg.location location = azurerm_resource_group.rg.location
@ -160,7 +161,7 @@ resource "azurerm_linux_virtual_machine" "vm_server" {
} }
} }
resource "azurerm_linux_virtual_machine" "vm_jump" { resource "azurerm_windows_virtual_machine" "vm_jump" {
name = "jump-vm" name = "jump-vm"
resource_group_name = azurerm_resource_group.rg.name resource_group_name = azurerm_resource_group.rg.name
location = azurerm_resource_group.rg.location location = azurerm_resource_group.rg.location
@ -211,7 +212,7 @@ resource "azurerm_firewall_policy_rule_collection_group" "prcg" {
type = "Https" type = "Https"
port = 443 port = 443
} }
destination_fqdns = [ "www.microsoft.com" ] destination_fqdns = ["www.microsoft.com"]
source_addresses = ["10.10.1.0/24"] source_addresses = ["10.10.1.0/24"]
} }
} }
@ -221,9 +222,10 @@ resource "azurerm_firewall_policy_rule_collection_group" "prcg" {
action = "Allow" action = "Allow"
rule { rule {
name = "netRule1" name = "netRule1"
protocols = [ "TCP" ] protocols = ["TCP"]
source_addresses = [ "10.10.1.0/24" ] source_addresses = ["10.10.1.0/24"]
destination_ports = [ "8000", "8999" ] destination_addresses = [ "*" ]
destination_ports = ["8000", "8999"]
} }
} }
} }