Azurerm_network_security_rule

Deploy Azure Network Security Rule with a dedicated Terraform module.

Requirements

• A Network Security Group

Providers

Name	Version
azurerm	n/a

Modules

No modules.

Resources

Name	Type
azurerm_network_security_rule.az_nsg_rule	resource

Inputs

Name	Description	Type	Default	Required
access	Specifies whether network traffic is allowed or denied. Possible values are Allow and Deny.	string	null	no
destination_address_prefix	CIDR or destination IP range or * to match any IP. Tags such as ‘VirtualNetwork’, ‘AzureLoadBalancer’ and ‘Internet’ can also be used.	string	"*"	no
destination_address_prefixes	List of destination address prefixes. Tags may not be used. This is required if destination_address_prefix is not specified.	any	null	no
destination_application_security_group_ids	A List of destination Application Security Group ID's	list(string)	null	no
destination_port_range	Destination Port or Range. Integer or range between 0 and 65535 or * to match any. This is required if destination_port_ranges is not specified.	string	"*"	no
destination_port_ranges	List of destination ports or port ranges. This is required if destination_port_range is not specified.	list(string)	null	no
direction	The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are Inbound and Outbound.	string	null	no
nsg_name	Specifies the name of the network security group.	string	n/a	yes
nsg_rule_name	The name of the security rule.	string	"default_rule1"	no
priority	Specifies the priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.	number	null	no
protocol	Network protocol this rule applies to. Possible values include Tcp, Udp, Icmp, Esp, Ah or * (which matches all).	string	"*"	no
resource_group_name	The name of the resource group in which to create the network security group.	string	n/a	yes
source_address_prefix	CIDR or source IP range or * to match any IP. Tags such as ‘VirtualNetwork’, ‘AzureLoadBalancer’ and ‘Internet’ can also be used. This is required if source_address_prefixes is not specified.	string	"*"	no
source_address_prefixes	List of source address prefixes. Tags may not be used. This is required if source_address_prefix is not specified.	any	null	no
source_application_security_group_ids	A List of source Application Security Group ID's	list(string)	null	no
source_port_range	Source Port or Range. Integer or range between 0 and 65535 or * to match any. This is required if source_port_ranges is not specified.	string	"*"	no
source_port_ranges	List of source ports or port ranges. This is required if source_port_range is not specified.	list(string)	null	no

Outputs

Name	Description
rule_id	The ID of Network security rule.