virtual-network-spoke
avinor/virtual-network-spoke/azurerm
Terraform module to create a spoke virtual network according to Microsoft Best Practice of deploying Hub-Spoke
Virtual network spoke Terraform module to create a spoke virtual network according to Microsoft Best Practice of deploying Hub-Spoke architecture. This requires that the hub network has already been deployed and that the service principal have access, see Setup for more details. Recommendation It is recommended to define as few service endpoints as possible on spoke subnets. Defining storage can be useful as it does not clutter the firewall log with all VM disk accesses, but besides that only define if absolutely necessary. Firewall subnet has all service endpoints defined so traffic will still go to Azure Backbone, but routed through firewall so all traffic is logged. Limitations Currently, spoke subnets do not support delegation as not all delegation resources support UDR, for instance c
| Name | Type | Description | Default |
|---|---|---|---|
| resource_group_name | string | Name of resource group to deploy resources in. | |
| hub_virtual_network_id | string | Id of the hub virtual network that spoke should peer against. | |
| firewall_ip | string | Private ip of firewall to route all traffic through. | |
| location | string | The Azure Region in which to create resource. | |
| name | string | Name of the spoke virtual network. | |
| address_space | list(string) | The address space that is used the virtual network. | |
| subnets | list(object({ name | Subnets to create and their configuration. All values are required, set empty to | |
| use_remote_gateway | bool | Use remote gateway when peering hub to spoke. | true |
| private_dns_link | object({ resource_group_na | Private dns link with auto-registration enabled | null |
| resolvable_dns_links | list(object({ resource_gro | Private dns links with auto-registration disabled | [] |
| storage_account_resource_group_create | bool | Property for supporting terraform state created by older version of this module. | false |
| tags | map(string) | Tags to apply to all resources created. | {} |
| diagnostics | object({ destination = s | Diagnostic settings for those resources that support it. See README.md for detai | null |
| enable_advanced_threat_protection | bool | Boolean flag which controls if advanced threat protection is enabled. | true |
| netwatcher | object({ resource_group_lo | Properties for creating network watcher. If set it will create Network Watcher r | null |
vnet_resource_group_namevnet_namesubnetsvnet_idAzure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,