Azure Network Route Table Route
This page shows how to write Terraform and Azure Resource Manager for Network Route Table Route and write them securely.
azurerm_virtual_hub_route_table_route (Terraform)
The Route Table Route in Network can be configured in Terraform with the resource name azurerm_virtual_hub_route_table_route
. The following sections describe how to use the resource and its parameters.
Example Usage from GitHub
An example could not be found in GitHub.
Parameters
The following arguments are supported:
route_table_id
- (Required) The ID of the Virtual Hub Route Table to link this route to. Changing this forces a new resource to be created.name
- (Required) The name which should be used for this route. Changing this forces a new resource to be created.destinations
- (Required) A list of destination addresses for this route.destinations_type
- (Required) The type of destinations. Possible values areCIDR
,ResourceId
andService
.next_hop
- (Required) The next hop's resource ID.next_hop_type
- (Optional) The type of next hop. Currently the only possible value isResourceId
. Defaults toResourceId
.
The following attributes are exported:
id
- The ID of the Virtual Hub Route Table.
Explanation in Terraform Registry
Manages a Route in a Virtual Hub Route Table.
Note: Route table routes can managed with this resource, or in-line with the virtual_hub_route_table resource. Using both is not supported.
Tips: Best Practices for The Other Azure Network Resources
In addition to the azurerm_network_security_group, Azure Network has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.
azurerm_network_security_group
Ensure to disable RDP port from the Internet
It is better to disable the RDP port from the Internet. RDP access should not be accepted from the Internet (*, 0.0.0.0, /0, internet, any), and consider using the Azure Bastion Service.
azurerm_network_security_rule
Ensure to set a more restrictive CIDR range for ingress from the internet
It is better to set a more restrictive CIDR range not to use very broad subnets. If possible, segments should be divided into smaller subnets.
azurerm_network_watcher_flow_log
Ensure to enable Retention policy for flow logs and set it to enough duration
It is better to enable a retention policy for flow logs. Flow logs show us all network activity in the cloud environment and support us when we face critical incidents.
Microsoft.Network/virtualHubs/hubRouteTables (Azure Resource Manager)
The virtualHubs/hubRouteTables in Microsoft.Network can be configured in Azure Resource Manager with the resource name Microsoft.Network/virtualHubs/hubRouteTables
. The following sections describe how to use the resource and its parameters.
Example Usage from GitHub
An example could not be found in GitHub.
Parameters
name
required - stringtype
required - stringapiVersion
required - stringproperties
requiredroutes
optional arrayname
required - stringThe name of the Route that is unique within a RouteTable. This name can be used to access this route.
destinationType
required - stringThe type of destinations (eg: CIDR, ResourceId, Service).
destinations
required - arrayList of all destinations.
nextHopType
required - stringThe type of next hop (eg: ResourceId).
nextHop
required - stringNextHop resource ID.
labels
optional - arrayList of labels associated with this route table.