Configures storage buckets to be optionally exposed via service endpoints

2020-01-22 19:35:54 -05:00
parent 9042a960bb
commit 01703b1488
5 changed files with 40 additions and 10 deletions
--- a/terraform/modules/bucket/main.tf
+++ b/terraform/modules/bucket/main.tf
@@ -9,6 +9,12 @@ resource "azurerm_storage_account" "bucket" {
  location                 = azurerm_resource_group.bucket.location
  account_tier             = "Standard"
  account_replication_type = "LRS"
+
+  network_rules {
+    default_action             = var.policy
+    virtual_network_subnet_ids = var.subnet_ids
+    #ip_rules = ["66.220.238.246/30"]
+  }
 }

 resource "azurerm_storage_container" "bucket" {