Azure Network Port
This page shows how to write Terraform and Azure Resource Manager for Network Port and write them securely.
azurerm_express_route_port (Terraform)
The Port in Network can be configured in Terraform with the resource name azurerm_express_route_port. The following sections describe how to use the resource and its parameters.
Example Usage from GitHub
An example could not be found in GitHub.
Parameters
-
bandwidth_in_gbpsrequired - number -
encapsulationrequired - string -
ethertypeoptional computed - string -
guidoptional computed - string -
idoptional computed - string -
locationrequired - string -
mtuoptional computed - string -
namerequired - string -
peering_locationrequired - string -
resource_group_namerequired - string -
tagsoptional - map from string to string -
identitylist block-
identity_idsoptional - list of string -
typerequired - string
-
-
link1list block-
admin_enabledoptional - bool -
connector_typeoptional computed - string -
idoptional computed - string -
interface_nameoptional computed - string -
macsec_cak_keyvault_secret_idoptional - string -
macsec_cipheroptional - string -
macsec_ckn_keyvault_secret_idoptional - string -
patch_panel_idoptional computed - string -
rack_idoptional computed - string -
router_nameoptional computed - string
-
-
link2list block-
admin_enabledoptional - bool -
connector_typeoptional computed - string -
idoptional computed - string -
interface_nameoptional computed - string -
macsec_cak_keyvault_secret_idoptional - string -
macsec_cipheroptional - string -
macsec_ckn_keyvault_secret_idoptional - string -
patch_panel_idoptional computed - string -
rack_idoptional computed - string -
router_nameoptional computed - string
-
-
timeoutssingle block
Explanation in Terraform Registry
Manages a Express Route Port.
Tips: Best Practices for The Other Azure Network Resources
In addition to the azurerm_network_security_group, Azure Network has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.
azurerm_network_security_group
Ensure to disable RDP port from the Internet
It is better to disable the RDP port from the Internet. RDP access should not be accepted from the Internet (*, 0.0.0.0, /0, internet, any), and consider using the Azure Bastion Service.
azurerm_network_security_rule
Ensure to set a more restrictive CIDR range for ingress from the internet
It is better to set a more restrictive CIDR range not to use very broad subnets. If possible, segments should be divided into smaller subnets.
azurerm_network_watcher_flow_log
Ensure to enable Retention policy for flow logs and set it to enough duration
It is better to enable a retention policy for flow logs. Flow logs show us all network activity in the cloud environment and support us when we face critical incidents.
Microsoft.Network/expressRoutePorts (Azure Resource Manager)
The expressRoutePorts in Microsoft.Network can be configured in Azure Resource Manager with the resource name Microsoft.Network/expressRoutePorts. The following sections describe how to use the resource and its parameters.
Example Usage from GitHub
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,
"type": "Microsoft.Network/expressRoutePorts",
"location": "westus",
"properties": {
"provisioningState": "Succeeded",
"peeringLocation": "peeringLocationName",
"bandwidthInGbps": 100,