avm-ptn-network-private-link-private-dns-zones
Azure/avm-ptn-network-private-link-private-dns-zones/azurerm
Terraform Azure Verified Pattern Module for Private Link Private DNS Zones
terraform-azurerm-avm-ptn-network-private-link-private-dns-zones This module deploys all known private link private DNS zones for Azure Services that support Private Link as documented and detailed here in Azure Private Endpoint private DNS zone values. The module also has logic built in to it to handle the replacements of the following strings in the private link private DNS zone names to the appropriate Azure Region name, short name or geo-code as required: - ...{regionName}... - ...{regionCode}... > [!NOTE] > This module only supports Azure Public/Commercial today and NOT Azure US Government Cloud (a.k.a. Fairfax) or Azure China Cloud (a.k.a. Mooncake). If you would like to see support added for these clouds please raise an issue/feature request on this repo/module. Migrating from versi
| Name | Type | Description | Default |
|---|---|---|---|
| location | string | Azure region where each of the private link private DNS zones and Resource Group | required |
| parent_id | string | The resource ID of the existing Resource Group. e.g. `/subscriptions/{subscripti | required |
| virtual_network_link_by_zone_and_virtual_network | map(map(object({ virtual_n | A map of maps of objects of Virtual Network Resource IDs to link to specific pri | {} |
| virtual_network_link_overrides_by_zone | map(object({ virtual_netwo | A map of overrides for the default Virtual Network Links applied per DNS zone. | {} |
| virtual_network_link_resolution_policy_default | string | The default resolution policy for the Virtual Network Links created. Possible va | "Default" |
| private_link_private_dns_zones | map(object({ zone_name | A set of private link private DNS zones to create. Each element must be a valid | {
"azure_acr_registry": {
"zone_na |
| private_link_private_dns_zones_regex_filter | object({ enabled = op | This variable controls whether or not the private link private DNS zones should | {} |
| tags | map(string) | (Optional) Tags of the resource. | null |
| timeouts | object({ dns_zones = optio | A map of timeouts objects, per resource type, to apply to the creation and destr | {} |
| enable_telemetry | bool | This variable controls whether or not telemetry is enabled for the module. For m | true |
| private_link_excluded_zones | set(string) | A set of private link private DNS zones to exclude. Either DNS zone names or the | [] |
| private_link_private_dns_zones_additional | map(object({ zone_name | A set of private link private DNS zones to create in addition to the zones suppl | {} |
| resource_group_role_assignments | map(object({ role_definiti | A map of role assignments to create on the Resource Group. The map key is delibe | {} |
| virtual_network_link_additional_virtual_networks | map(object({ virtual_netwo | A map of objects of Virtual Network Resource IDs to link to all the private link | {} |
| virtual_network_link_default_virtual_networks | map(object({ virtual_netwo | A map of objects of Virtual Network Resource IDs to link to all the private link | {} |
| virtual_network_link_overrides_by_virtual_network | map(object({ virtual_netwo | A map of overrides for the default Virtual Network Links applied per virtual net | {} |
| lock | object({ kind = string | Controls the Resource Lock configuration for the Resource Group that hosts the p | null |
| virtual_network_link_name_template | string | A prefix to use for the names of the Virtual Network Links created. A template f | "vnet_link-${zone_key}-${vnet_key}" |
| virtual_network_link_overrides_by_zone_and_virtual_network | map(map(object({ name | A map of overrides for the default Virtual Network Links applied per DNS zone an | {} |
private_dns_zone_resource_ids — The map of private DNS zones to resource ids.private_link_private_dns_zones_map — The final map of private link private DNS zones to link to virtual networks including the region namresource_group_resource_id — The resource ID of the resource group that the private link private DNS zones are deployed into.Azure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Azure Verified Resource Module for Key Vault