Top / Microsoft Azure / Azure Network

Network

555 examples and best practices for Azure Network, including Azure Network Application Gateway and Azure Network Application Rule Collection.

Review your .tf file for Azure best practices

Shisho Cloud, our free checker to make sure your Terraform configuration follows best practices, is available (beta).

Application Gateway

azurerm_application_gateway (10 example cases)

Microsoft.Network/applicationGateways (10 example cases)

Application Rule Collection

azurerm_firewall_application_rule_collection (10 example cases)

Application Security Group

azurerm_application_security_group (8 example cases)

Microsoft.Network/applicationSecurityGroups (10 example cases)

azurerm_bastion_host (10 example cases)

Microsoft.Network/bastionHosts (10 example cases)

azurerm_virtual_hub_bgp_connection (4 example cases)

Microsoft.Network/virtualHubs/bgpConnections (0 example case)

azurerm_express_route_circuit (10 example cases)

Microsoft.Network/expressRouteCircuits (10 example cases)

Circuit Authorization

azurerm_express_route_circuit_authorization (10 example cases)

Microsoft.Network/expressRouteCircuits/authorizations (0 example case)

Circuit Connection

azurerm_express_route_circuit_connection (0 example case)

Microsoft.Network/expressRouteCircuits/peerings/connections (0 example case)

Circuit Peering

azurerm_express_route_circuit_peering (10 example cases)

Microsoft.Network/expressRouteCircuits/peerings (0 example case)

azurerm_express_route_connection (0 example case)

Microsoft.Network/expressRouteGateways/expressRouteConnections (0 example case)

azurerm_virtual_hub_connection (10 example cases)

Microsoft.Network/virtualHubs/hubVirtualNetworkConnections (0 example case)

Connection Monitor

azurerm_network_connection_monitor (2 example cases)

Microsoft.Network/networkWatchers/connectionMonitors (0 example case)

Custom HTTPS Configuration

azurerm_frontdoor_custom_https_configuration (8 example cases)

Microsoft.Network/frontDoors (10 example cases)

DDOS Protection Plan

azurerm_network_ddos_protection_plan (10 example cases)

Microsoft.Network/ddosProtectionPlans (10 example cases)

azurerm_virtual_network_dns_servers (0 example case)

Microsoft.Network/virtualNetworks (10 example cases)

azurerm_traffic_manager_endpoint (4 example cases)

Microsoft.Network/trafficManagerProfiles (10 example cases)

azurerm_route_filter (0 example case)

Microsoft.Network/routeFilters (10 example cases)

azurerm_firewall (10 example cases)

Microsoft.Network/azureFirewalls (10 example cases)

Firewall Policy

azurerm_frontdoor_firewall_policy (10 example cases)

Microsoft.Network/frontDoorWebApplicationFirewallPolicies (10 example cases)

Firewall Policy

azurerm_web_application_firewall_policy (10 example cases)

Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies (10 example cases)

azurerm_frontdoor (8 example cases)

Microsoft.Network/frontDoors (10 example cases)

azurerm_express_route_gateway (10 example cases)

Microsoft.Network/expressRouteGateways (10 example cases)

azurerm_virtual_network_gateway (10 example cases)

Microsoft.Network/virtualNetworkGateways (10 example cases)

azurerm_vpn_gateway (10 example cases)

Microsoft.Network/vpnGateways (10 example cases)

Gateway Connection

azurerm_virtual_network_gateway_connection (10 example cases)

Microsoft.Network/connections (10 example cases)

Gateway Connection

azurerm_vpn_gateway_connection (9 example cases)

Microsoft.Network/vpnGateways/vpnConnections (0 example case)

azurerm_network_interface (5 example cases)

Microsoft.Network/networkInterfaces (10 example cases)

Interface Application Gateway Backend Address Pool Association

azurerm_network_interface_application_gateway_backend_address_pool_association (10 example cases)

Microsoft.Network/applicationGateways (10 example cases)

Interface Application Security Group Association

azurerm_network_interface_application_security_group_association (10 example cases)

Microsoft.Network/applicationSecurityGroups (10 example cases)

Interface Backend Address Pool Association

azurerm_network_interface_backend_address_pool_association (9 example cases)

Microsoft.Network/loadBalancers/backendAddressPools (0 example case)

Interface NAT Rule Association

azurerm_network_interface_nat_rule_association (10 example cases)

Microsoft.Network/loadBalancers/inboundNatRules (0 example case)

Interface Security Group Association

azurerm_network_interface_security_group_association (10 example cases)

Microsoft.Network/networkSecurityGroups (10 example cases)

azurerm_virtual_hub_ip (4 example cases)

Microsoft.Network/virtualHubs/ipConfigurations (0 example case)

azurerm_ip_group (8 example cases)

Microsoft.Network/ipGroups (10 example cases)

Local Network Gateway

azurerm_local_network_gateway (10 example cases)

Microsoft.Network/localNetworkGateways (10 example cases)

azurerm_nat_gateway (10 example cases)

Microsoft.Network/natGateways (10 example cases)

NAT Gateway Association

azurerm_subnet_nat_gateway_association (10 example cases)

Microsoft.Network/virtualNetworks/subnets (3 example cases)

NAT Rule Collection

azurerm_firewall_nat_rule_collection (10 example cases)

Network Rule Collection

azurerm_firewall_network_rule_collection (10 example cases)

Network Security Group Association

azurerm_subnet_network_security_group_association (10 example cases)

Microsoft.Network/virtualNetworks/subnets (3 example cases)

azurerm_network_packet_capture (1 example case)

Microsoft.Network/networkWatchers/packetCaptures (0 example case)

azurerm_packet_capture (1 example case)

Microsoft.Network/networkWatchers/packetCaptures (0 example case)

azurerm_virtual_network_peering (10 example cases)

Microsoft.Network/virtualNetworks/virtualNetworkPeerings (0 example case)

azurerm_firewall_policy (10 example cases)

Microsoft.Network/firewallPolicies (10 example cases)

Policy Rule Collection Group

azurerm_firewall_policy_rule_collection_group (10 example cases)

Microsoft.Network/firewallPolicies/ruleCollectionGroups (0 example case)

azurerm_express_route_port (0 example case)

Microsoft.Network/expressRoutePorts (10 example cases)

azurerm_public_ip_prefix (8 example cases)

Microsoft.Network/publicIPPrefixes (10 example cases)

Private Endpoint

azurerm_private_endpoint (10 example cases)

Microsoft.Network/privateEndpoints (10 example cases)

Private Link Service

azurerm_private_link_service (10 example cases)

Microsoft.Network/privateLinkServices (10 example cases)

azurerm_network_profile (10 example cases)

Microsoft.Network/networkProfiles (10 example cases)

azurerm_traffic_manager_profile (10 example cases)

Microsoft.Network/trafficManagerProfiles (10 example cases)

azurerm_public_ip (1 example case)

Microsoft.Network/publicIPAddresses (10 example cases)

Public IP Association

azurerm_nat_gateway_public_ip_association (10 example cases)

Microsoft.Network/natGateways (10 example cases)

Public IP Prefix Association

azurerm_nat_gateway_public_ip_prefix_association (1 example case)

Microsoft.Network/natGateways (10 example cases)

azurerm_route (10 example cases)

Microsoft.Network/routeTables/routes (0 example case)

azurerm_virtual_hub_route_table (9 example cases)

Microsoft.Network/virtualHubs/hubRouteTables (0 example case)

Route Table Association

azurerm_subnet_route_table_association (6 example cases)

Microsoft.Network/virtualNetworks/subnets (3 example cases)

Route Table Route

azurerm_virtual_hub_route_table_route (0 example case)

Microsoft.Network/virtualHubs/hubRouteTables (0 example case)

azurerm_frontdoor_rules_engine (0 example case)

azurerm_network_security_group (10 example cases)

2 best security practices

Ensure to disable RDP port from the Internet
Ensure to disable RDP port from internet

Microsoft.Network/networkSecurityGroups (10 example cases)

Security Partner Provider

azurerm_virtual_hub_security_partner_provider (3 example cases)

Microsoft.Network/virtualHubs (10 example cases)

azurerm_network_security_rule (9 example cases)

4 best security practices

Ensure to set a more restrictive CIDR range for ingress from the internet
Ensure to disable RDP port from the Internet
Ensure to disable RDP port from internet
Ensure to set a more restrictive CIDR range for egress from the Internet

Microsoft.Network/networkSecurityGroups/securityRules (0 example case)

Server Configuration

azurerm_vpn_server_configuration (10 example cases)

Microsoft.Network/vpnServerConfigurations (10 example cases)

Service Endpoint Storage Policy

azurerm_subnet_service_endpoint_storage_policy (2 example cases)

Microsoft.Network/serviceEndpointPolicies (8 example cases)

azurerm_vpn_site (10 example cases)

Microsoft.Network/vpnSites (10 example cases)

azurerm_subnet (8 example cases)

Microsoft.Network/virtualNetworks/subnets (3 example cases)

azurerm_route_table (7 example cases)

Microsoft.Network/routeTables (10 example cases)

azurerm_virtual_hub (10 example cases)

Microsoft.Network/virtualHubs (10 example cases)

Virtual Network

azurerm_virtual_network (10 example cases)

Microsoft.Network/virtualNetworks (10 example cases)

azurerm_virtual_wan (10 example cases)

Microsoft.Network/virtualWans (10 example cases)

azurerm_point_to_site_vpn_gateway (10 example cases)

Microsoft.Network/vpnGateways (10 example cases)

azurerm_network_watcher (10 example cases)

Microsoft.Network/networkWatchers (10 example cases)

Watcher Flow Log

azurerm_network_watcher_flow_log (10 example cases)

1 best security practice

Ensure to enable Retention policy for flow logs and set it to enough duration

Microsoft.Network/networkWatchers (10 example cases)