Skip to content

avidhara/terraform-azurerm-bastion

Repository files navigation

Terraform module for Azure Bastion Host

How to use it as a module

Requirements

Name Version
terraform >= 0.13.1
azurerm >= 3.0.0

Providers

Name Version
azurerm >= 3.0.0

Modules

Name Source Version
subnets foss-cafe/subnets/azurerm 1.0.2

Resources

Name Type
azurerm_bastion_host.this resource
azurerm_public_ip.this resource

Inputs

Name Description Type Default Required
address_prefixes (Required) The address prefixes to use for the subnet. list(string) n/a yes
allocation_method (Optional) Defines the allocation method for this IP address. Possible values are Static or Dynamic. string "Static" no
bastion_host_name (Required) Specifies the name of the Bastion Host. Changing this forces a new resource to be created. string n/a yes
bastion_host_sku (Optional) The SKU of the Bastion Host. Accepted values are Basic and Standard. Defaults to Basic. string "Basic" no
copy_paste_enabled (Optional) Is Copy/Paste feature enabled for the Bastion Host. Defaults to true. bool true no
create_bastion_host Do you want to create subnet bool true no
ddos_protection_mode (Optional) The DDoS protection mode of the public IP. Possible values are Disabled, Enabled, and VirtualNetworkInherited. Defaults to VirtualNetworkInherited. string "VirtualNetworkInherited" no
ddos_protection_plan_id (Optional) The ID of DDoS protection plan associated with the public IP. string null no
domain_name_label (Optional) Label for the Domain Name. Will be used to make up the FQDN. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system. string null no
edge_zone (Optional) Specifies the Edge Zone within the Azure Region where this Public IP should exist. Changing this forces a new Public IP to be created. string null no
file_copy_enabled (Optional) Is File Copy feature enabled for the Bastion Host. Defaults to false. bool false no
idle_timeout_in_minutes (Optional) Specifies the timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. number 4 no
ip_connect_enabled (Optional) Is IP Connect feature enabled for the Bastion Host. Defaults to false. bool false no
ip_name (Required) The name of the network resources . Changing this forces a new resource to be created. string n/a yes
ip_sku (Optional) The SKU of the Public IP. Accepted values are Basic and Standard. Defaults to Basic. Changing this forces a new resource to be created. string "Standard" no
ip_sku_tier (Optional) The SKU Tier that should be used for the Public IP. Possible values are Regional and Global. Defaults to Regional. Changing this forces a new resource to be created. string "Regional" no
ip_tags (Optional) A mapping of IP tags to assign to the public IP. Changing this forces a new resource to be created. map(string) {} no
ip_version (Optional) The IP Version to use, IPv6 or IPv4. Changing this forces a new resource to be created. string "IPv4" no
ipconfig_name (Required) The name of the IP configuration. Changing this forces a new resource to be created. string n/a yes
location (Required) The location/region where the virtual network is created. Changing this forces a new resource to be created. string n/a yes
public_ip_edge_zone (Optional) Specifies the Edge Zone within the Azure Region where this Virtual Network should exist. Changing this forces a new Virtual Network to be created. string null no
public_ip_prefix_id (Optional) If specified then public IP address allocated will be provided from the public IP prefix resource. Changing this forces a new resource to be created. string null no
resource_group_name (Required) The name of the resource group in which to create the subnet. Changing this forces a new resource to be created. string n/a yes
reverse_fqdn (Optional) A fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN. string null no
scale_units (Optional) The number of scale units with which to provision the Bastion Host. Possible values are between 2 and 50. Defaults to 2. number 2 no
service_endpoint_policy_ids (Optional) The list of IDs of Service Endpoint Policies to associate with the subnet. list(string) null no
service_endpoints (Optional) The list of Service endpoints to associate with the subnet. Possible values include: Microsoft.AzureActiveDirectory, Microsoft.AzureCosmosDB, Microsoft.ContainerRegistry, Microsoft.EventHub, Microsoft.KeyVault, Microsoft.ServiceBus, Microsoft.Sql, Microsoft.Storage, and Microsoft.Web. list(string) null no
shareable_link_enabled (Optional) Is Shareable Link feature enabled for the Bastion Host. Defaults to false. bool false no
tags (Optional) A mapping of tags to assign to the resource. map(string) {} no
tunneling_enabled (Optional) Is Tunneling feature enabled for the Bastion Host. Defaults to false. bool false no
virtual_network_name (Required) The name of the virtual network to which to attach the subnet. Changing this forces a new resource to be created. string n/a yes
zones (Optional) A collection containing the availability zone to allocate the Public IP in. Changing this forces a new resource to be created. list(string) null no

Outputs

No outputs.