Virtual Network

Overview

{
  "virtual_network": {
    "name": "vnet-int-{env}",
    "address_prefixes": ["172.21.80.0/24"],
    "subnets": [
      {
        "name": "snet-int-{env}",
        "address_prefix": "172.21.80.0/27",

        "delegation": "WebserverFarms",
        "service_endpoints": ["Web"]
      },
      {
        "name": "snet-sqlint-{env}",
        "address_prefix": "172.21.80.32/27",

        "delegation": "SqlmanagedInstances",
        "service_endpoints": ["Sql"]
      }
    ],

    "location": "northeurope",
    "external": false,
    "resource_group_name": "my-rg-name",
    "tags": { "example": "S0" }
  }
}

Virtual Network Reference

Key	Type	Description
`name` (required)	string	The name of the virtual network (see how to name)
`address_prefixes` (required)	string[]	A list of address blocks reserved for this virtual network in CIDR notation
`subnets` (required)	Subnets Definition	Subnets for the virtual network
`location`	string	Resource Location (defaults to the resource group location)
`external`	bool	A reference to an existing virtual network (defaults to `false`)
`resource_group_name`	string	The name of the resource group where the resource is located, only with external resources (defaults to the resource group of the deployment)
`tags`	object	Additional tags for the resource (defaults to no additional tags)

Subnets

Value	Description
`name` (required)	The name of the subnet for the virtual network
`address_prefix` (required)	List of address prefixes for the subnet
`delegation`	Delegation
`service_endpoints`	Service Endpoints

For a better understanding about virtual network and subnets, see this link

Delegation

Subnet delegation enables you to designate a specific subnet for an Azure paaS service fo your choice that needs to be injected into your virtual network.

When you delegate a subnet to an Azure service, you allow that service to establish some basic network configuration rules for that subnet, which help the Azure service operate their instances in a stable manner.

Value
`NetworkfpgaNetworkInterfaces`
`WebserverFarms`
`ContainerInstancecontainerGroups`
`Netappvolumes`
`HardwareSecurityModulesdedicatedHSM`
`ServiceFabricMeshnetworks`
`LogicintegrationServiceEnvironments`
`BatchbatchAccounts`
`SqlmanagedInstances`
`WebhostingEnvironments`
`BareMetalCrayServer`
`BareMetalMonitoringServers`
`Databricksworkspaces`
`BareMetalAzureHostedService`
`BareMetalAzureVMware`
`BareMetalAzureHPC`
`BareMetalAzurePaymentHSM`
`StreamAnalyticsstreamingJobs`
`DBforPostgreSQLserversv2`
`AzureCosmosDBclusters`
`MachineLearningServicesworkspaces`
`DBforPostgreSQLsingleServers`
`DBforPostgreSQLflexibleServers`
`DBforMySQLserversv2`
`DBforMySQLflexibleServers`
`ApiManagementservice`
`Synapseworkspaces`
`PowerPlatformvnetaccesslinks`
`NetworkdnsResolvers`
`Kustoclusters`
`DelegatedNetworkcontroller`
`ContainerServicemanagedClusters`
`PowerPlatformenterprisePolicies`
`NetworkvirtualNetworkGateways`
`StoragePooldiskPools`
`DocumentDBcassandraClusters`
`Apollonpu`
`AVSPrivateClouds`
`OrbitalorbitalGateways`
`Singularityaccountsjobs`
`Singularityaccountsmodels`
`Singularityaccountsnpu`
`AISupercomputeraccountsjobs`
`AISupercomputeraccountsmodels`
`AISupercomputeraccountsnpu`
`ContainerServiceTestClients`
`LabServiceslabplans`
`FidalgonetworkSettings`
`DevCenternetworkConnection`
`NginxDeployments`
`CloudTestpools`
`CloudTesthostedpools`
`CloudTestimages`
`Codespacesplans`
`PaloAltoNetworksCloudngfwfirewalls`
`QumuloStragefileSystems`
`ApptestClients`
`Appenvironments`
`ServiceNetworkingtrafficControllers`

Service Endpoints

Virtual Network service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Service Endpoints enables private IP addresses in the VNet to reach the endpoint of an Azure service without needing a public IP address on the VNet.

Value
`Storage`
`Sql`
`AzureActiveDirectory`
`AzureCosmosDb`
`Web`
`NetworkServiceEndpointTest`
`KeyVault`
`EventHub`
`ServiceBus`
`ContainerRegistry`
`CognitiveServices`
`StorageGlobal`

Back

Storage Account

Web App