From 9bbc95d39b808c7b7d2569e5d869e14365ec6e60 Mon Sep 17 00:00:00 2001 From: Gillian Stravers Date: Thu, 7 Nov 2024 11:35:21 +0100 Subject: [PATCH] add threat intelligence mode variable --- modules/vhub/main.tf | 3 ++- modules/vhub/variables.tf | 2 ++ variables.tf | 16 +++++++++------- 3 files changed, 13 insertions(+), 8 deletions(-) diff --git a/modules/vhub/main.tf b/modules/vhub/main.tf index f334635..7dc2176 100644 --- a/modules/vhub/main.tf +++ b/modules/vhub/main.tf @@ -29,7 +29,7 @@ resource "azurerm_firewall" "this" { location = var.virtual_hubs.location sku_name = "AZFW_Hub" sku_tier = var.virtual_hubs.firewall_sku_tier - firewall_policy_id = azurerm_firewall_policy.this.id + firewall_policy_id = azurerm_firewall_policy.this.id virtual_hub { virtual_hub_id = azurerm_virtual_hub.this.id public_ip_count = var.virtual_hubs.firewall_public_ip_count @@ -41,6 +41,7 @@ resource "azurerm_firewall_policy" "this" { resource_group_name = var.resource_group_name location = var.virtual_hubs.location sku = var.virtual_hubs.firewall_sku_tier + threat_intelligence_mode = var.virtual_hubs.firewall_threat_intelligence_mode dns { proxy_enabled = var.virtual_hubs.firewall_proxy_enabled servers = var.virtual_hubs.firewall_dns_servers diff --git a/modules/vhub/variables.tf b/modules/vhub/variables.tf index 9967f7f..32e3ba1 100644 --- a/modules/vhub/variables.tf +++ b/modules/vhub/variables.tf @@ -5,8 +5,10 @@ variable "virtual_hubs" { address_prefix = string firewall_sku_tier = string firewall_public_ip_count = number + firewall_threat_intelligence_mode = string firewall_proxy_enabled = bool firewall_dns_servers = list(string) + }) } diff --git a/variables.tf b/variables.tf index 80d0564..0aab345 100644 --- a/variables.tf +++ b/variables.tf @@ -14,12 +14,14 @@ variable "virtual_wan" { variable "virtual_hubs" { type = map(object({ - name = string - location = string - address_prefix = string - firewall_sku_tier = string - firewall_public_ip_count = number - firewall_proxy_enabled = bool - firewall_dns_servers = list(string) + name = string + location = string + address_prefix = string + firewall_sku_tier = string + firewall_public_ip_count = number + firewall_threat_intelligence_mode = string + firewall_proxy_enabled = bool + firewall_dns_servers = list(string) + })) }