@drunk-pulumi/azure 0.0.37 → 0.0.38

package/VNet/FirewallPolicy.js

@@ -1,93 +1,87 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.linkRulesToPolicy = exports.denyOtherAppRule = void 0;
+exports.FirewallPolicyGroup = exports.linkRulesToPolicy = void 0;
 const network = require("@pulumi/azure-native/network");
 const types_1 = require("@pulumi/azure-native/types");
 const Naming_1 = require("../Common/Naming");
-exports.denyOtherAppRule = {
-    name: 'deny-others-websites',
-    ruleType: 'ApplicationRule',
-    description: 'Deny All Others websites',
-    sourceAddresses: ['*'],
-    targetFqdns: ['*'],
-    protocols: [
-        { protocolType: 'Http', port: 80 },
-        { protocolType: 'Https', port: 443 },
-        { protocolType: 'Mssql', port: 1433 },
-    ],
-};
-const linkRulesToPolicy = ({ firewallPolicyName, priority = 200, group, name, rules, enableDenyOtherAppRule, dependsOn, }) => {
-    const ruleCollections = new Array();
-    let p = 200;
-    rules.forEach((r, i) => {
-        if (r.dnatRules && r.dnatRules.length > 0) {
-            ruleCollections.push({
-                name: `${r.name}-dnat`,
-                priority: i + p++,
-                action: {
-                    type: types_1.enums.network.FirewallPolicyNatRuleCollectionActionType.DNAT,
-                },
-                ruleCollectionType: 'FirewallPolicyNatRuleCollection',
-                rules: r.dnatRules,
-            });
-        }
-        if (r.networkRules && r.networkRules.length > 0) {
-            ruleCollections.push({
-                name: `${r.name}-net`,
-                priority: i + p++,
-                action: {
-                    type: types_1.enums.network.FirewallPolicyFilterRuleCollectionActionType
-                        .Allow,
-                },
-                ruleCollectionType: 'FirewallPolicyFilterRuleCollection',
-                rules: r.networkRules,
-            });
-        }
-        if (r.applicationRules && r.applicationRules.length > 0) {
-            ruleCollections.push({
-                name: `${r.name}-app`,
-                priority: i + 200 + p++,
-                action: {
-                    type: types_1.enums.network.FirewallPolicyFilterRuleCollectionActionType
-                        .Allow,
-                },
-                ruleCollectionType: 'FirewallPolicyFilterRuleCollection',
-                rules: r.applicationRules,
-            });
-        }
-    });
-    if (enableDenyOtherAppRule) {
-        //Denied others
-        ruleCollections.push({
-            name: `${name}-deny-others`,
-            priority: 6001,
+const linkRulesToPolicy = ({ firewallPolicyName, group, rules, dependsOn, }) => rules
+    .sort((a, b) => a.priority - b.priority)
+    .map((p) => {
+    const gr = new network.FirewallPolicyRuleCollectionGroup(p.name, {
+        ...group,
+        ...p,
+        firewallPolicyName,
+    }, { dependsOn });
+    dependsOn = gr;
+    return gr;
+});
+exports.linkRulesToPolicy = linkRulesToPolicy;
+const FirewallPolicyGroup = ({ policy, priority, action = types_1.enums.network.FirewallPolicyFilterRuleCollectionActionType.Allow, }) => {
+    const policyCollections = new Array();
+    // DNAT rules
+    let pStart = priority + 1;
+    if (policy.dnatRules && policy.dnatRules.length > 0) {
+        policyCollections.push({
+            name: `${policy.name}-dnat`,
+            priority: pStart++,
             action: {
-                type: types_1.enums.network.FirewallPolicyFilterRuleCollectionActionType.Allow,
+                type: types_1.enums.network.FirewallPolicyNatRuleCollectionActionType.DNAT,
             },
-            ruleCollectionType: 'FirewallPolicyFilterRuleCollection',
-            rules: [exports.denyOtherAppRule],
+            ruleCollectionType: "FirewallPolicyNatRuleCollection",
+            rules: policy.dnatRules,
         });
     }
-    const groupName = (0, Naming_1.getFirewallPolicyGroupName)(name);
-    return new network.FirewallPolicyRuleCollectionGroup(groupName, {
-        name: groupName,
-        ...group,
-        firewallPolicyName,
+    // Network rules
+    if (policy.netRules && policy.netRules.length > 0) {
+        policyCollections.push({
+            name: `${policy.name}-net`,
+            priority: pStart++,
+            action: {
+                type: action,
+            },
+            ruleCollectionType: "FirewallPolicyFilterRuleCollection",
+            rules: policy.netRules,
+        });
+    }
+    // Apps rules
+    if (policy.appRules && policy.appRules.length > 0) {
+        policyCollections.push({
+            name: `${policy.name}-app`,
+            priority: pStart++,
+            action: {
+                type: action,
+            },
+            ruleCollectionType: "FirewallPolicyFilterRuleCollection",
+            rules: policy.appRules,
+        });
+    }
+    return {
+        name: `${policy.name}-grp`,
         priority,
-        ruleCollections,
-    }, { dependsOn });
+        ruleCollections: policyCollections,
+    };
 };
-exports.linkRulesToPolicy = linkRulesToPolicy;
+exports.FirewallPolicyGroup = FirewallPolicyGroup;
 exports.default = ({ name, group, basePolicyId, dnsSettings, transportSecurityCA, insights, sku = types_1.enums.network.FirewallPolicySkuTier.Basic, dependsOn, }) => {
     name = (0, Naming_1.getFirewallPolicyName)(name);
-    const policy = new network.FirewallPolicy(name, {
+    return new network.FirewallPolicy(name, {
         firewallPolicyName: name,
         ...group,
         sku: { tier: sku },
         basePolicy: basePolicyId ? { id: basePolicyId } : undefined,
         dnsSettings,
-        threatIntelMode: types_1.enums.network.AzureFirewallThreatIntelMode.Deny,
-        transportSecurity: transportSecurityCA
+        snat: {
+            //Auto learn need a Route Server
+            autoLearnPrivateRanges: "Enabled",
+            privateRanges: ["IANAPrivateRanges"],
+        },
+        sql: {
+            allowSqlRedirect: true,
+        },
+        threatIntelMode: sku !== types_1.enums.network.FirewallPolicySkuTier.Basic
+            ? types_1.enums.network.AzureFirewallThreatIntelMode.Deny
+            : undefined,
+        transportSecurity: sku !== types_1.enums.network.FirewallPolicySkuTier.Basic && transportSecurityCA
             ? { certificateAuthority: transportSecurityCA }
             : undefined,
         insights: insights
@@ -103,6 +97,5 @@ exports.default = ({ name, group, basePolicyId, dnsSettings, transportSecurityCA
             }
             : undefined,
     }, { dependsOn });
-    return policy;
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/FirewallRules/AksFirewallRules.d.ts

@@ -1,5 +1,5 @@
-import { Input } from '@pulumi/pulumi';
-import { FirewallRuleResults } from './types';
+import { Input } from "@pulumi/pulumi";
+import { FirewallRuleResults } from "../types";
 interface BasicRuleProps {
     startPriority: number;
 }
@@ -9,7 +9,8 @@ interface NatRuleProps extends BasicRuleProps {
         {
             name: string;
             allowHttp?: boolean;
-            externalIpAddress: Input<string>;
+            /** Default is '*' to allows all requests */
+            sourceIpAddress?: Input<string>;
             internalIpAddress: Input<string>;
         }
     ];

package/VNet/FirewallRules/AksFirewallRules.js

@@ -4,42 +4,42 @@ const types_1 = require("@pulumi/azure-native/types");
 const getDnatRules = ({ startPriority, publicIpAddresses, dNATs, }) => {
     const rules = new Array();
     rules.push({
-        name: 'dnat-rules',
+        name: "dnat-rules",
         action: { type: types_1.enums.network.AzureFirewallNatRCActionType.Dnat },
         priority: ++startPriority,
         rules: dNATs.flatMap((nat) => {
             const httpsRule = {
                 name: `${nat.name}-inbound-443`,
                 description: `Forward port 443 external IpAddress of ${nat.name} to internal IpAddress`,
-                sourceAddresses: [nat.externalIpAddress],
+                sourceAddresses: [nat.sourceIpAddress ?? "*"],
                 destinationAddresses: publicIpAddresses,
-                destinationPorts: ['443'],
-                protocols: ['TCP'],
+                destinationPorts: ["443"],
+                protocols: ["TCP"],
                 translatedAddress: nat.internalIpAddress,
-                translatedPort: '443',
+                translatedPort: "443",
             };
             const httpRule = {
                 name: `${nat.name}-inbound-80`,
                 description: `Forward port 80 external IpAddress of ${nat.name} to internal IpAddress`,
-                sourceAddresses: [nat.externalIpAddress],
+                sourceAddresses: [nat.sourceIpAddress ?? "*"],
                 destinationAddresses: publicIpAddresses,
-                destinationPorts: ['80'],
-                protocols: ['TCP'],
+                destinationPorts: ["80"],
+                protocols: ["TCP"],
                 translatedAddress: nat.internalIpAddress,
-                translatedPort: '80',
+                translatedPort: "80",
             };
             return nat.allowHttp ? [httpsRule, httpRule] : [httpsRule];
         }),
     });
     return rules;
 };
-const getAksNetRules = ({ startPriority, location = 'SoutheastAsia', vnetAddressSpace, }) => {
+const getAksNetRules = ({ startPriority, location = "SoutheastAsia", vnetAddressSpace, }) => {
     location = location.toLowerCase();
     const rules = new Array();
     //============= Standard Rules for AKS ================== //
     //https://docs.microsoft.com/en-us/azure/aks/limit-egress-traffic
     rules.push({
-        name: 'aks-net-rules',
+        name: "aks-net-rules",
         action: { type: types_1.enums.network.AzureFirewallRCActionType.Allow },
         priority: ++startPriority,
         rules: [
@@ -53,30 +53,31 @@ const getAksNetRules = ({ startPriority, location = 'SoutheastAsia', vnetAddress
             //   destinationPorts: ['1194'],
             // },
             {
-                name: 'aks-tcp',
-                description: 'For tunneled secure communication between the nodes and the control plane for AzureCloud.SoutheastAsia',
-                protocols: ['TCP'],
+                name: "aks-tcp",
+                description: "For tunneled secure communication between the nodes and the control plane for AzureCloud.SoutheastAsia",
+                protocols: ["TCP"],
                 sourceAddresses: vnetAddressSpace,
                 destinationAddresses: [`AzureCloud.${location}`],
-                destinationPorts: ['443', '9000'],
+                destinationPorts: ["443", "9000"],
             },
             {
-                name: 'aks-time',
-                description: 'Required for Network Time Protocol (NTP) time synchronization on Linux nodes.',
-                protocols: ['UDP'],
+                name: "aks-time",
+                description: "Required for Network Time Protocol (NTP) time synchronization on Linux nodes.",
+                protocols: ["UDP"],
                 sourceAddresses: vnetAddressSpace,
-                destinationFqdns: ['ntp.ubuntu.com'],
-                destinationPorts: ['123'],
-            },
-            {
-                name: 'aks-time_others',
-                description: 'Required for Network Time Protocol (NTP) time synchronization on Linux nodes.',
-                protocols: ['UDP'],
-                sourceAddresses: vnetAddressSpace,
-                destinationAddresses: ['*'],
-                destinationPorts: ['123'],
+                destinationFqdns: ["ntp.ubuntu.com"],
+                destinationPorts: ["123"],
             },
             // {
+            //   name: "aks-time_others",
+            //   description:
+            //     "Required for Network Time Protocol (NTP) time synchronization on Linux nodes.",
+            //   protocols: ["UDP"],
+            //   sourceAddresses: vnetAddressSpace,
+            //   destinationAddresses: ["*"],
+            //   destinationPorts: ["123"],
+            // },
+            // {
             //   name: 'aks-control-server',
             //   description:
             //     'Required if running pods/deployments that access the API Server, those pods/deployments would use the API IP.',
@@ -86,33 +87,33 @@ const getAksNetRules = ({ startPriority, location = 'SoutheastAsia', vnetAddress
             //   destinationPorts: ['443', '10250', '10251'],
             // },
             {
-                name: 'azure-services-tags',
-                description: 'Allows internal services to connect to Azure Resources.',
-                protocols: ['TCP'],
+                name: "azure-services-tags",
+                description: "Allows internal services to connect to Azure Resources.",
+                protocols: ["TCP"],
                 sourceAddresses: vnetAddressSpace,
                 destinationAddresses: [
-                    'AzureContainerRegistry.SoutheastAsia',
-                    'MicrosoftContainerRegistry.SoutheastAsia',
-                    'AzureActiveDirectory',
-                    'AzureMonitor.SoutheastAsia',
-                    'AppConfiguration',
-                    'AzureKeyVault.SoutheastAsia',
+                    "AzureContainerRegistry.SoutheastAsia",
+                    "MicrosoftContainerRegistry.SoutheastAsia",
+                    "AzureActiveDirectory",
+                    "AzureMonitor.SoutheastAsia",
+                    "AppConfiguration",
+                    "AzureKeyVault.SoutheastAsia",
                     //'AzureSignalR', This already using private endpoint
                     //'DataFactory.SoutheastAsia',
                     //'EventHub.SoutheastAsia',
-                    'ServiceBus.SoutheastAsia',
+                    "ServiceBus.SoutheastAsia",
                     //'Sql.SoutheastAsia', This already using private endpoint
-                    'Storage.SoutheastAsia',
+                    "Storage.SoutheastAsia",
                 ],
-                destinationPorts: ['443'],
+                destinationPorts: ["443"],
             },
             {
-                name: 'others-dns',
-                description: 'Others DNS.',
-                protocols: ['TCP', 'UDP'],
+                name: "others-dns",
+                description: "Others DNS.",
+                protocols: ["TCP", "UDP"],
                 sourceAddresses: vnetAddressSpace,
-                destinationAddresses: ['*'],
-                destinationPorts: ['53'],
+                destinationAddresses: ["*"],
+                destinationPorts: ["53"],
             },
         ],
     });
@@ -124,104 +125,104 @@ const getAksAppRules = ({ startPriority, vnetAddressSpace, }) => {
     //https://docs.microsoft.com/en-us/azure/aks/limit-egress-traffic
     //AzureKubernetesService
     rules.push({
-        name: 'aks-services-fqdn-rules',
+        name: "aks-services-fqdn-rules",
         action: { type: types_1.enums.network.AzureFirewallRCActionType.Allow },
         priority: ++startPriority,
         rules: [
             {
-                name: 'aks-services',
-                description: 'Allows pods to access AzureKubernetesService',
+                name: "aks-services",
+                description: "Allows pods to access AzureKubernetesService",
                 sourceAddresses: vnetAddressSpace,
                 //AzureKubernetesService is allow to access google.com
-                fqdnTags: ['AzureKubernetesService'],
+                fqdnTags: ["AzureKubernetesService"],
             },
             {
-                name: 'aks-fqdn',
-                description: 'Azure Global required FQDN',
+                name: "aks-fqdn",
+                description: "Azure Global required FQDN",
                 sourceAddresses: vnetAddressSpace,
                 targetFqdns: [
                     //AKS mater
-                    '*.hcp.southeastasia.azmk8s.io',
+                    "*.hcp.southeastasia.azmk8s.io",
                     //Microsoft Container Registry
-                    'mcr.microsoft.com',
-                    'data.mcr.microsoft.com',
-                    '*.data.mcr.microsoft.com',
+                    "mcr.microsoft.com",
+                    "data.mcr.microsoft.com",
+                    "*.data.mcr.microsoft.com",
                     //Azure management
-                    'management.azure.com',
-                    'login.microsoftonline.com',
+                    "management.azure.com",
+                    "login.microsoftonline.com",
                     //Microsoft trusted package repository
-                    'packages.microsoft.com',
+                    "packages.microsoft.com",
                     //Azure CDN
-                    'acs-mirror.azureedge.net',
+                    "acs-mirror.azureedge.net",
                     //CosmosDb
-                    '*.documents.azure.com',
+                    "*.documents.azure.com",
                 ],
-                protocols: [{ protocolType: 'Https', port: 443 }],
+                protocols: [{ protocolType: "Https", port: 443 }],
             },
             {
-                name: 'azure-monitors',
+                name: "azure-monitors",
                 sourceAddresses: vnetAddressSpace,
                 targetFqdns: [
-                    'dc.services.visualstudio.com',
-                    '*.ods.opinsights.azure.com',
-                    '*.oms.opinsights.azure.com',
-                    '*.monitoring.azure.com',
-                    '*.services.visualstudio.com',
+                    "dc.services.visualstudio.com",
+                    "*.ods.opinsights.azure.com",
+                    "*.oms.opinsights.azure.com",
+                    "*.monitoring.azure.com",
+                    "*.services.visualstudio.com",
                 ],
-                protocols: [{ protocolType: 'Https', port: 443 }],
+                protocols: [{ protocolType: "Https", port: 443 }],
             },
             {
-                name: 'azure-policy',
+                name: "azure-policy",
                 sourceAddresses: vnetAddressSpace,
                 targetFqdns: [
-                    '*.policy.core.windows.net',
-                    'gov-prod-policy-data.trafficmanager.net',
-                    'raw.githubusercontent.com',
-                    'dc.services.visualstudio.com',
+                    "*.policy.core.windows.net",
+                    "gov-prod-policy-data.trafficmanager.net",
+                    "raw.githubusercontent.com",
+                    "dc.services.visualstudio.com",
                 ],
-                protocols: [{ protocolType: 'Https', port: 443 }],
+                protocols: [{ protocolType: "Https", port: 443 }],
             },
             {
                 //TODO Allow Docker Access is potential risk once we have budget and able to upload external images to ACR then remove docker.
-                name: 'docker-services',
+                name: "docker-services",
                 sourceAddresses: vnetAddressSpace,
                 targetFqdns: [
-                    'quay.io', //For Cert Manager
-                    '*.quay.io',
-                    'auth.docker.io',
-                    '*.auth.docker.io',
-                    '*.cloudflare.docker.io',
-                    'docker.io',
-                    'cloudflare.docker.io',
-                    'cloudflare.docker.com',
-                    '*.cloudflare.docker.com',
-                    '*.registry-1.docker.io',
-                    'registry-1.docker.io',
+                    "quay.io", //For Cert Manager
+                    "*.quay.io",
+                    "auth.docker.io",
+                    "*.auth.docker.io",
+                    "*.cloudflare.docker.io",
+                    "docker.io",
+                    "cloudflare.docker.io",
+                    "cloudflare.docker.com",
+                    "*.cloudflare.docker.com",
+                    "*.registry-1.docker.io",
+                    "registry-1.docker.io",
                 ],
-                protocols: [{ protocolType: 'Https', port: 443 }],
+                protocols: [{ protocolType: "Https", port: 443 }],
             },
             {
                 //TODO Allow external registry is potential risk once we have budget and able to upload external images to ACR then remove docker.
-                name: 'k8s-services',
+                name: "k8s-services",
                 sourceAddresses: vnetAddressSpace,
                 targetFqdns: [
-                    'k8s.gcr.io', //nginx images
-                    '*.k8s.io',
-                    'asia-east1-docker.pkg.dev',
-                    '*.gcr.io',
-                    '*.googleapis.com',
+                    "k8s.gcr.io", //nginx images
+                    "*.k8s.io",
+                    "asia-east1-docker.pkg.dev",
+                    "*.gcr.io",
+                    "*.googleapis.com",
                 ],
-                protocols: [{ protocolType: 'Https', port: 443 }],
+                protocols: [{ protocolType: "Https", port: 443 }],
             },
             {
-                name: 'ubuntu-services',
+                name: "ubuntu-services",
                 sourceAddresses: vnetAddressSpace,
                 targetFqdns: [
-                    'security.ubuntu.com',
-                    'azure.archive.ubuntu.com',
-                    'changelogs.ubuntu.com',
+                    "security.ubuntu.com",
+                    "azure.archive.ubuntu.com",
+                    "changelogs.ubuntu.com",
                 ],
-                protocols: [{ protocolType: 'Https', port: 443 }],
+                protocols: [{ protocolType: "Https", port: 443 }],
             },
         ],
     });
@@ -247,4 +248,4 @@ exports.default = ({ startPriority, vnetAddressSpace, ...others }) => {
         applicationRuleCollections,
     };
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiQWtzRmlyZXdhbGxSdWxlcy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9WTmV0L0ZpcmV3YWxsUnVsZXMvQWtzRmlyZXdhbGxSdWxlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBLHNEQUFvRTtBQXFCcEUsTUFBTSxZQUFZLEdBQUcsQ0FBQyxFQUNwQixhQUFhLEVBQ2IsaUJBQWlCLEVBQ2pCLEtBQUssR0FDUSxFQUE0RCxFQUFFO0lBQzNFLE1BQU0sS0FBSyxHQUFHLElBQUksS0FBSyxFQUFxRCxDQUFDO0lBRTdFLEtBQUssQ0FBQyxJQUFJLENBQUM7UUFDVCxJQUFJLEVBQUUsWUFBWTtRQUNsQixNQUFNLEVBQUUsRUFBRSxJQUFJLEVBQUUsYUFBSyxDQUFDLE9BQU8sQ0FBQyw0QkFBNEIsQ0FBQyxJQUFJLEVBQUU7UUFDakUsUUFBUSxFQUFFLEVBQUUsYUFBYTtRQUV6QixLQUFLLEVBQUUsS0FBSyxDQUFDLE9BQU8sQ0FBQyxDQUFDLEdBQUcsRUFBRSxFQUFFO1lBQzNCLE1BQU0sU0FBUyxHQUFHO2dCQUNoQixJQUFJLEVBQUUsR0FBRyxHQUFHLENBQUMsSUFBSSxjQUFjO2dCQUMvQixXQUFXLEVBQUUsMENBQTBDLEdBQUcsQ0FBQyxJQUFJLHdCQUF3QjtnQkFDdkYsZUFBZSxFQUFFLENBQUMsR0FBRyxDQUFDLGVBQWUsSUFBSSxHQUFHLENBQUM7Z0JBQzdDLG9CQUFvQixFQUFFLGlCQUFpQjtnQkFDdkMsZ0JBQWdCLEVBQUUsQ0FBQyxLQUFLLENBQUM7Z0JBQ3pCLFNBQVMsRUFBRSxDQUFDLEtBQUssQ0FBQztnQkFDbEIsaUJBQWlCLEVBQUUsR0FBRyxDQUFDLGlCQUFpQjtnQkFDeEMsY0FBYyxFQUFFLEtBQUs7YUFDdEIsQ0FBQztZQUVGLE1BQU0sUUFBUSxHQUFHO2dCQUNmLElBQUksRUFBRSxHQUFHLEdBQUcsQ0FBQyxJQUFJLGFBQWE7Z0JBQzlCLFdBQVcsRUFBRSx5Q0FBeUMsR0FBRyxDQUFDLElBQUksd0JBQXdCO2dCQUN0RixlQUFlLEVBQUUsQ0FBQyxHQUFHLENBQUMsZUFBZSxJQUFJLEdBQUcsQ0FBQztnQkFDN0Msb0JBQW9CLEVBQUUsaUJBQWlCO2dCQUN2QyxnQkFBZ0IsRUFBRSxDQUFDLElBQUksQ0FBQztnQkFDeEIsU0FBUyxFQUFFLENBQUMsS0FBSyxDQUFDO2dCQUNsQixpQkFBaUIsRUFBRSxHQUFHLENBQUMsaUJBQWlCO2dCQUN4QyxjQUFjLEVBQUUsSUFBSTthQUNyQixDQUFDO1lBQ0YsT0FBTyxHQUFHLENBQUMsU0FBUyxDQUFDLENBQUMsQ0FBQyxDQUFDLFNBQVMsRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUM3RCxDQUFDLENBQUM7S0FDSCxDQUFDLENBQUM7SUFFSCxPQUFPLEtBQUssQ0FBQztBQUNmLENBQUMsQ0FBQztBQVFGLE1BQU0sY0FBYyxHQUFHLENBQUMsRUFDdEIsYUFBYSxFQUNiLFFBQVEsR0FBRyxlQUFlLEVBQzFCLGdCQUFnQixHQUNKLEVBQTJELEVBQUU7SUFDekUsUUFBUSxHQUFHLFFBQVEsQ0FBQyxXQUFXLEVBQUUsQ0FBQztJQUVsQyxNQUFNLEtBQUssR0FDVCxJQUFJLEtBQUssRUFBeUQsQ0FBQztJQUNyRSw0REFBNEQ7SUFDNUQsaUVBQWlFO0lBRWpFLEtBQUssQ0FBQyxJQUFJLENBQUM7UUFDVCxJQUFJLEVBQUUsZUFBZTtRQUNyQixNQUFNLEVBQUUsRUFBRSxJQUFJLEVBQUUsYUFBSyxDQUFDLE9BQU8sQ0FBQyx5QkFBeUIsQ0FBQyxLQUFLLEVBQUU7UUFDL0QsUUFBUSxFQUFFLEVBQUUsYUFBYTtRQUN6QixLQUFLLEVBQUU7WUFDTCxJQUFJO1lBQ0oscUJBQXFCO1lBQ3JCLGlCQUFpQjtZQUNqQix5SEFBeUg7WUFDekgsd0JBQXdCO1lBQ3hCLHVDQUF1QztZQUN2QyxzREFBc0Q7WUFDdEQsZ0NBQWdDO1lBQ2hDLEtBQUs7WUFDTDtnQkFDRSxJQUFJLEVBQUUsU0FBUztnQkFDZixXQUFXLEVBQ1Qsd0dBQXdHO2dCQUMxRyxTQUFTLEVBQUUsQ0FBQyxLQUFLLENBQUM7Z0JBQ2xCLGVBQWUsRUFBRSxnQkFBZ0I7Z0JBQ2pDLG9CQUFvQixFQUFFLENBQUMsY0FBYyxRQUFRLEVBQUUsQ0FBQztnQkFDaEQsZ0JBQWdCLEVBQUUsQ0FBQyxLQUFLLEVBQUUsTUFBTSxDQUFDO2FBQ2xDO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLFVBQVU7Z0JBQ2hCLFdBQVcsRUFDVCwrRUFBK0U7Z0JBQ2pGLFNBQVMsRUFBRSxDQUFDLEtBQUssQ0FBQztnQkFDbEIsZUFBZSxFQUFFLGdCQUFnQjtnQkFDakMsZ0JBQWdCLEVBQUUsQ0FBQyxnQkFBZ0IsQ0FBQztnQkFDcEMsZ0JBQWdCLEVBQUUsQ0FBQyxLQUFLLENBQUM7YUFDMUI7WUFDRCxJQUFJO1lBQ0osNkJBQTZCO1lBQzdCLGlCQUFpQjtZQUNqQix1RkFBdUY7WUFDdkYsd0JBQXdCO1lBQ3hCLHVDQUF1QztZQUN2QyxpQ0FBaUM7WUFDakMsK0JBQStCO1lBQy9CLEtBQUs7WUFDTCxJQUFJO1lBQ0osZ0NBQWdDO1lBQ2hDLGlCQUFpQjtZQUNqQix1SEFBdUg7WUFDdkgsd0JBQXdCO1lBQ3hCLHVDQUF1QztZQUN2Qyx5RUFBeUU7WUFDekUsaURBQWlEO1lBQ2pELEtBQUs7WUFDTDtnQkFDRSxJQUFJLEVBQUUscUJBQXFCO2dCQUMzQixXQUFXLEVBQUUseURBQXlEO2dCQUN0RSxTQUFTLEVBQUUsQ0FBQyxLQUFLLENBQUM7Z0JBQ2xCLGVBQWUsRUFBRSxnQkFBZ0I7Z0JBQ2pDLG9CQUFvQixFQUFFO29CQUNwQixzQ0FBc0M7b0JBQ3RDLDBDQUEwQztvQkFDMUMsc0JBQXNCO29CQUN0Qiw0QkFBNEI7b0JBQzVCLGtCQUFrQjtvQkFDbEIsNkJBQTZCO29CQUM3QixxREFBcUQ7b0JBQ3JELDhCQUE4QjtvQkFDOUIsMkJBQTJCO29CQUMzQiwwQkFBMEI7b0JBQzFCLDBEQUEwRDtvQkFDMUQsdUJBQXVCO2lCQUN4QjtnQkFDRCxnQkFBZ0IsRUFBRSxDQUFDLEtBQUssQ0FBQzthQUMxQjtZQUNEO2dCQUNFLElBQUksRUFBRSxZQUFZO2dCQUNsQixXQUFXLEVBQUUsYUFBYTtnQkFDMUIsU0FBUyxFQUFFLENBQUMsS0FBSyxFQUFFLEtBQUssQ0FBQztnQkFDekIsZUFBZSxFQUFFLGdCQUFnQjtnQkFDakMsb0JBQW9CLEVBQUUsQ0FBQyxHQUFHLENBQUM7Z0JBQzNCLGdCQUFnQixFQUFFLENBQUMsSUFBSSxDQUFDO2FBQ3pCO1NBQ0Y7S0FDRixDQUFDLENBQUM7SUFFSCxPQUFPLEtBQUssQ0FBQztBQUNmLENBQUMsQ0FBQztBQUVGLE1BQU0sY0FBYyxHQUFHLENBQUMsRUFDdEIsYUFBYSxFQUNiLGdCQUFnQixHQUdqQixFQUErRCxFQUFFO0lBQ2hFLE1BQU0sS0FBSyxHQUNULElBQUksS0FBSyxFQUE2RCxDQUFDO0lBQ3pFLDREQUE0RDtJQUM1RCxpRUFBaUU7SUFFakUsd0JBQXdCO0lBQ3hCLEtBQUssQ0FBQyxJQUFJLENBQUM7UUFDVCxJQUFJLEVBQUUseUJBQXlCO1FBQy9CLE1BQU0sRUFBRSxFQUFFLElBQUksRUFBRSxhQUFLLENBQUMsT0FBTyxDQUFDLHlCQUF5QixDQUFDLEtBQUssRUFBRTtRQUMvRCxRQUFRLEVBQUUsRUFBRSxhQUFhO1FBQ3pCLEtBQUssRUFBRTtZQUNMO2dCQUNFLElBQUksRUFBRSxjQUFjO2dCQUNwQixXQUFXLEVBQUUsOENBQThDO2dCQUMzRCxlQUFlLEVBQUUsZ0JBQWdCO2dCQUNqQyxzREFBc0Q7Z0JBQ3RELFFBQVEsRUFBRSxDQUFDLHdCQUF3QixDQUFDO2FBQ3JDO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLFVBQVU7Z0JBQ2hCLFdBQVcsRUFBRSw0QkFBNEI7Z0JBQ3pDLGVBQWUsRUFBRSxnQkFBZ0I7Z0JBQ2pDLFdBQVcsRUFBRTtvQkFDWCxXQUFXO29CQUNYLCtCQUErQjtvQkFDL0IsOEJBQThCO29CQUM5QixtQkFBbUI7b0JBQ25CLHdCQUF3QjtvQkFDeEIsMEJBQTBCO29CQUMxQixrQkFBa0I7b0JBQ2xCLHNCQUFzQjtvQkFDdEIsMkJBQTJCO29CQUMzQixzQ0FBc0M7b0JBQ3RDLHdCQUF3QjtvQkFDeEIsV0FBVztvQkFDWCwwQkFBMEI7b0JBQzFCLFVBQVU7b0JBQ1YsdUJBQXVCO2lCQUN4QjtnQkFDRCxTQUFTLEVBQUUsQ0FBQyxFQUFFLFlBQVksRUFBRSxPQUFPLEVBQUUsSUFBSSxFQUFFLEdBQUcsRUFBRSxDQUFDO2FBQ2xEO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLGdCQUFnQjtnQkFDdEIsZUFBZSxFQUFFLGdCQUFnQjtnQkFDakMsV0FBVyxFQUFFO29CQUNYLDhCQUE4QjtvQkFDOUIsNEJBQTRCO29CQUM1Qiw0QkFBNEI7b0JBQzVCLHdCQUF3QjtvQkFDeEIsNkJBQTZCO2lCQUM5QjtnQkFDRCxTQUFTLEVBQUUsQ0FBQyxFQUFFLFlBQVksRUFBRSxPQUFPLEVBQUUsSUFBSSxFQUFFLEdBQUcsRUFBRSxDQUFDO2FBQ2xEO1lBQ0Q7Z0JBQ0UsSUFBSSxFQUFFLGNBQWM7Z0JBQ3BCLGVBQWUsRUFBRSxnQkFBZ0I7Z0JBQ2pDLFdBQVcsRUFBRTtvQkFDWCwyQkFBMkI7b0JBQzNCLHlDQUF5QztvQkFDekMsMkJBQTJCO29CQUMzQiw4QkFBOEI7aUJBQy9CO2dCQUNELFNBQVMsRUFBRSxDQUFDLEVBQUUsWUFBWSxFQUFFLE9BQU8sRUFBRSxJQUFJLEVBQUUsR0FBRyxFQUFFLENBQUM7YUFDbEQ7WUFDRDtnQkFDRSw4SEFBOEg7Z0JBQzlILElBQUksRUFBRSxpQkFBaUI7Z0JBQ3ZCLGVBQWUsRUFBRSxnQkFBZ0I7Z0JBQ2pDLFdBQVcsRUFBRTtvQkFDWCxTQUFTLEVBQUUsa0JBQWtCO29CQUM3QixXQUFXO29CQUNYLGdCQUFnQjtvQkFDaEIsa0JBQWtCO29CQUNsQix3QkFBd0I7b0JBQ3hCLFdBQVc7b0JBQ1gsc0JBQXNCO29CQUN0Qix1QkFBdUI7b0JBQ3ZCLHlCQUF5QjtvQkFDekIsd0JBQXdCO29CQUN4QixzQkFBc0I7aUJBQ3ZCO2dCQUNELFNBQVMsRUFBRSxDQUFDLEVBQUUsWUFBWSxFQUFFLE9BQU8sRUFBRSxJQUFJLEVBQUUsR0FBRyxFQUFFLENBQUM7YUFDbEQ7WUFDRDtnQkFDRSxrSUFBa0k7Z0JBQ2xJLElBQUksRUFBRSxjQUFjO2dCQUNwQixlQUFlLEVBQUUsZ0JBQWdCO2dCQUNqQyxXQUFXLEVBQUU7b0JBQ1gsWUFBWSxFQUFFLGNBQWM7b0JBQzVCLFVBQVU7b0JBQ1YsMkJBQTJCO29CQUMzQixVQUFVO29CQUNWLGtCQUFrQjtpQkFDbkI7Z0JBQ0QsU0FBUyxFQUFFLENBQUMsRUFBRSxZQUFZLEVBQUUsT0FBTyxFQUFFLElBQUksRUFBRSxHQUFHLEVBQUUsQ0FBQzthQUNsRDtZQUNEO2dCQUNFLElBQUksRUFBRSxpQkFBaUI7Z0JBQ3ZCLGVBQWUsRUFBRSxnQkFBZ0I7Z0JBQ2pDLFdBQVcsRUFBRTtvQkFDWCxxQkFBcUI7b0JBQ3JCLDBCQUEwQjtvQkFDMUIsdUJBQXVCO2lCQUN4QjtnQkFDRCxTQUFTLEVBQUUsQ0FBQyxFQUFFLFlBQVksRUFBRSxPQUFPLEVBQUUsSUFBSSxFQUFFLEdBQUcsRUFBRSxDQUFDO2FBQ2xEO1NBQ0Y7S0FDRixDQUFDLENBQUM7SUFFSCxPQUFPLEtBQUssQ0FBQztBQUNmLENBQUMsQ0FBQztBQU9GLGtCQUFlLENBQUMsRUFDZCxhQUFhLEVBQ2IsZ0JBQWdCLEVBQ2hCLEdBQUcsTUFBTSxFQUNRLEVBQXVCLEVBQUU7SUFDMUMsTUFBTSxrQkFBa0IsR0FBRyxZQUFZLENBQUM7UUFDdEMsYUFBYTtRQUNiLEdBQUcsTUFBTTtLQUNWLENBQUMsQ0FBQztJQUVILE1BQU0sc0JBQXNCLEdBQUcsY0FBYyxDQUFDO1FBQzVDLGFBQWE7UUFDYixnQkFBZ0I7UUFDaEIsR0FBRyxNQUFNO0tBQ1YsQ0FBQyxDQUFDO0lBRUgsTUFBTSwwQkFBMEIsR0FBRyxjQUFjLENBQUM7UUFDaEQsYUFBYTtRQUNiLGdCQUFnQjtLQUNqQixDQUFDLENBQUM7SUFFSCxPQUFPO1FBQ0wsa0JBQWtCO1FBQ2xCLHNCQUFzQjtRQUN0QiwwQkFBMEI7S0FDM0IsQ0FBQztBQUNKLENBQUMsQ0FBQyJ9

package/VNet/Helper.d.ts

@@ -1,7 +1,8 @@
 import * as network from "@pulumi/azure-native/network";
-import { Output } from "@pulumi/pulumi";
+import { Input, Output } from "@pulumi/pulumi";
 import * as netmask from "netmask";
-import { FirewallRuleResults } from "./FirewallRules/types";
+import { ResourceGroupInfo } from "../types";
+import { VnetInfoType } from "./types";
 export declare const appGatewaySubnetName = "app-gateway";
 export declare const gatewaySubnetName = "GatewaySubnet";
 export declare const azFirewallSubnet = "AzureFirewallSubnet";
@@ -14,8 +15,6 @@ export declare const convertToIpRange: (ipAddress: string[]) => Array<{
     end: string;
 }>;
 export declare const getVnetIdFromSubnetId: (subnetId: string) => string;
-/**Merge Firewall Rules Policies with starting priority*/
-export declare const mergeFirewallRules: (rules: Array<FirewallRuleResults>, startPriority?: number) => FirewallRuleResults;
 interface SubnetProps {
     subnetName: string;
     vnetAndGroupName: string;
@@ -30,4 +29,9 @@ export declare const getIpAddressResource: ({ name, groupName, }: {
     name: string;
     groupName: string;
 }) => Promise<network.GetPublicIPAddressResult>;
+export declare const getVnetInfo: (groupName: string) => VnetInfoType;
+export declare const getVnetIdByName: (groupName: string) => Output<string>;
+export declare const parseVnetInfoFromId: (vnetId: Input<string>) => Output<VnetInfoType>;
+export declare const getFirewallIpAddress: (name: string, group: ResourceGroupInfo) => Output<string>;
+export declare const getFirewallIpAddressByGroupName: (groupName: string) => Output<string>;
 export {};