@drunk-pulumi/azure-components 0.0.6

package/vnet/securityRules/commonRules.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBasionSecurityRules = getBasionSecurityRules;
+exports.getAppGatewaySecurityRules = getAppGatewaySecurityRules;
+const SecurityRuleBuilder_1 = require("./SecurityRuleBuilder");
+function getBasionSecurityRules({ bastionAddressPrefix, startPriority = 300, }) {
+    return (new SecurityRuleBuilder_1.SecurityRuleBuilder()
+        //Inbound
+        .allowInbound('BastionAllowsHttpsInbound', {
+        sourceAddressPrefix: 'Internet',
+        sourcePortRange: '*',
+        destinationAddressPrefix: bastionAddressPrefix,
+        destinationPortRange: '443',
+        protocol: 'Tcp',
+    })
+        .allowInbound('BastionAllowsGatewayManagerInbound', {
+        sourceAddressPrefix: 'GatewayManager',
+        sourcePortRange: '*',
+        destinationAddressPrefix: '*',
+        destinationPortRange: '443',
+        protocol: 'Tcp',
+    })
+        .allowInbound('BastionAllowsAzureBalancerInbound', {
+        sourceAddressPrefix: 'AzureLoadBalancer',
+        sourcePortRange: '*',
+        destinationAddressPrefix: '*',
+        destinationPortRange: '443',
+    })
+        .allowInbound('BastionAllowsHostCommunicationInbound', {
+        sourceAddressPrefix: 'VirtualNetwork',
+        sourcePortRange: '*',
+        destinationAddressPrefix: 'VirtualNetwork',
+        destinationPortRanges: ['8080', '5710'],
+        protocol: '*',
+    })
+        .allowInbound('BastionAllowsVmSshRdpInbound', {
+        sourceAddressPrefix: bastionAddressPrefix,
+        sourcePortRange: '*',
+        destinationAddressPrefix: 'VirtualNetwork',
+        destinationPortRanges: ['22', '3389'],
+        protocol: '*',
+    })
+        //Outbound
+        .allowOutbound('BastionAllowsSshRdpOutbound', {
+        sourceAddressPrefix: '*',
+        sourcePortRange: '*',
+        destinationAddressPrefix: 'VirtualNetwork',
+        destinationPortRanges: ['22', '3389'],
+        protocol: '*',
+    })
+        .allowOutbound('BastionAllowsAzureCloudOutbound', {
+        sourceAddressPrefix: '*',
+        sourcePortRange: '*',
+        destinationAddressPrefix: 'AzureCloud',
+        destinationPortRange: '443',
+    })
+        .allowOutbound('BastionAllowsCommunicationOutbound', {
+        sourceAddressPrefix: 'VirtualNetwork',
+        sourcePortRange: '*',
+        destinationAddressPrefix: 'VirtualNetwork',
+        destinationPortRanges: ['8080', '5710'],
+    })
+        .build(startPriority));
+}
+function getAppGatewaySecurityRules({ apiGatewayAddressPrefix, startPriority = 300, }) {
+    return (new SecurityRuleBuilder_1.SecurityRuleBuilder()
+        // Inbound
+        .allowInbound('AllowInternetInGatewayHealth', {
+        sourceAddressPrefix: 'Internet',
+        sourcePortRange: '*',
+        destinationAddressPrefix: apiGatewayAddressPrefix,
+        destinationPortRanges: ['65200-65535'],
+        protocol: 'Tcp',
+        description: 'Allow Health check access from internet to Gateway',
+    })
+        .allowInbound('AllowHttpsInternetInGateway', {
+        sourceAddressPrefix: 'Internet',
+        sourcePortRange: '*',
+        destinationAddressPrefix: apiGatewayAddressPrefix,
+        destinationPortRange: '443',
+        protocol: 'Tcp',
+        description: 'Allow HTTPS access from internet to Gateway',
+    })
+        .allowInbound('AllowLoadBalancerInGateway', {
+        sourceAddressPrefix: 'AzureLoadBalancer',
+        sourcePortRange: '*',
+        destinationAddressPrefix: apiGatewayAddressPrefix,
+        destinationPortRange: '*',
+        protocol: 'Tcp',
+        description: 'Allow Load balancer to Gateway',
+    })
+        .build(startPriority));
+}
+//# sourceMappingURL=data:application/json;base64,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

package/vnet/securityRules/index.d.ts

@@ -0,0 +1,2 @@
+export * from './SecurityRuleBuilder';
+export * from './commonRules';

package/vnet/securityRules/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./SecurityRuleBuilder"), exports);
+__exportStar(require("./commonRules"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvdm5ldC9zZWN1cml0eVJ1bGVzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSx3REFBc0M7QUFDdEMsZ0RBQThCIn0=