Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

disable dev #27

Closed
wants to merge 4 commits into from
Closed

disable dev #27

wants to merge 4 commits into from

Conversation

dbwest
Copy link
Owner

@dbwest dbwest commented Jan 27, 2024

No description provided.

Copy link

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖

Checkov 🧪failure

Show Plan

module.storage[0].random_string.sac: Refreshing state... [id=hq1y]
module.db[0].random_pet.db: Refreshing state... [id=humpback]
module.db[0].random_password.password: Refreshing state... [id=none]
azurerm_resource_group.this[0]: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus]
module.db[0].azurerm_route_table.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/routeTables/neubank-dev-humpback-rt-eastus]
module.db[0].azurerm_network_security_group.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-humpback-nsg-eastus]
module.app_stack[0].azurerm_service_plan.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/serverFarms/neubank-dev-appserviceplan-eastus]
module.app_insights[0].azurerm_log_analytics_workspace.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.OperationalInsights/workspaces/workspace]
module.app_insights[0].azurerm_monitor_action_group.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Insights/actionGroups/neubank-dev-action-group-eastus]
module.network[0].azurerm_network_security_group.vnet: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-vnetnsg-eastus]
module.network[0].azurerm_virtual_network.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus]
module.network[0].azurerm_private_dns_zone.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateDnsZones/privatelink.azurewebsites.net]
module.storage[0].azurerm_storage_account.blob: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Storage/storageAccounts/hq1ydevstoracceastus]
module.db[0].azurerm_subnet.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus]
module.network[0].module.subnets.azurerm_subnet.integration: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus]
module.network[0].module.subnets.azurerm_subnet.endpoint: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-endpoint-subnet-eastus]
module.db[0].azurerm_subnet_network_security_group_association.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus]
module.app_insights[0].azurerm_application_insights.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Insights/components/neubank-dev-frontend-appins-eastus]
module.db[0].azurerm_subnet_route_table_association.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus]
module.db[0].azurerm_mssql_managed_instance.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Sql/managedInstances/neubank-dev-managedmssql-eastus]
module.app_insights[0].azurerm_monitor_smart_detector_alert_rule.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.AlertsManagement/smartDetectorAlertRules/neubank-dev-frontend-smt-det-rule-eastus]
module.app_stack[0].azurerm_windows_web_app.frontend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus]
module.app_stack[0].azurerm_windows_web_app.backend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-backend-eastus]
module.storage[0].azurerm_storage_container.blob: Refreshing state... [id=https://hq1ydevstoracceastus.blob.core.windows.net/neubank-dev-sc-eastus]
module.storage[0].azurerm_private_endpoint.blob: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/neubank-dev-stendpt-eastus]
module.storage[0].azurerm_storage_blob.blob: Refreshing state... [id=https://hq1ydevstoracceastus.blob.core.windows.net/neubank-dev-sc-eastus/rr123.gif]
module.network[0].module.endpoints.azurerm_private_endpoint.backend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/backwebappprivateendpoint]
module.network[0].module.endpoints.azurerm_app_service_virtual_network_swift_connection.frontend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus/config/virtualNetwork]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

module.app_stack[0].azurerm_windows_web_app.frontend will be updated in-place

~ resource "azurerm_windows_web_app" "frontend" {
id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus"
name = "neubank-dev-frontend-eastus"
tags = {
"Environment" = "Dev"
"Owner" = "first.last@company.com"
"Project" = "Mortgage Calculator"
}
- virtual_network_subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus" -> null
# (21 unchanged attributes hidden)

    # (1 unchanged block hidden)
}

module.network[0].module.subnets.azurerm_subnet.integration will be updated in-place

~ resource "azurerm_subnet" "integration" {
id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus"
name = "neubank-dev-integration-subnet-eastus"
# (9 unchanged attributes hidden)

  ~ delegation {
        name = "delegation"

      ~ service_delegation {
          ~ actions = [
              - "Microsoft.Network/virtualNetworks/subnets/action",
            ]
            name    = "Microsoft.Web/serverFarms"
        }
    }
}

Plan: 0 to add, 2 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
terraform apply "tfplan"

Show Checkov Results

terraform scan results:

check_id file resource check_name guideline
0 CKV2_AZURE_41 /modules/storage/main.tf module.storage[0].azurerm_storage_account.blob Ensure storage account is configured with SAS expiration policy https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-iam-policies/bc-azure-2-41
1 CKV2_AZURE_40 /modules/storage/main.tf module.storage[0].azurerm_storage_account.blob Ensure storage account is not configured with Shared Key authorization https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-iam-policies/bc-azure-2-40
2 CKV2_AZURE_31 /modules/network/subnets/main.tf module.network[0].module.subnets.azurerm_subnet.endpoint Ensure VNET subnet is configured with a Network Security Group (NSG) https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-general-policies/bc-azure-2-31
3 CKV2_AZURE_31 /modules/network/subnets/main.tf module.network[0].module.subnets.azurerm_subnet.integration Ensure VNET subnet is configured with a Network Security Group (NSG) https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-general-policies/bc-azure-2-31

Pusher: @dbwest, Action: pull_request, Working Directory: ``, Workflow: Terraform Dev

Copy link

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖

Checkov 🧪failure

Show Plan

module.db[0].random_pet.db: Refreshing state... [id=humpback]
module.db[0].random_password.password: Refreshing state... [id=none]
module.storage[0].random_string.sac: Refreshing state... [id=hq1y]
azurerm_resource_group.this[0]: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus]
module.db[0].azurerm_route_table.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/routeTables/neubank-dev-humpback-rt-eastus]
module.app_stack[0].azurerm_service_plan.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/serverFarms/neubank-dev-appserviceplan-eastus]
module.app_insights[0].azurerm_monitor_action_group.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Insights/actionGroups/neubank-dev-action-group-eastus]
module.db[0].azurerm_network_security_group.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-humpback-nsg-eastus]
module.app_insights[0].azurerm_log_analytics_workspace.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.OperationalInsights/workspaces/workspace]
module.network[0].azurerm_virtual_network.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus]
module.network[0].azurerm_network_security_group.vnet: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-vnetnsg-eastus]
module.network[0].azurerm_private_dns_zone.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateDnsZones/privatelink.azurewebsites.net]
module.storage[0].azurerm_storage_account.blob: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Storage/storageAccounts/hq1ydevstoracceastus]
module.db[0].azurerm_subnet.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus]
module.network[0].module.subnets.azurerm_subnet.endpoint: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-endpoint-subnet-eastus]
module.network[0].module.subnets.azurerm_subnet.integration: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus]
module.db[0].azurerm_subnet_network_security_group_association.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus]
module.app_insights[0].azurerm_application_insights.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Insights/components/neubank-dev-frontend-appins-eastus]
module.db[0].azurerm_subnet_route_table_association.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus]
module.db[0].azurerm_mssql_managed_instance.db: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Sql/managedInstances/neubank-dev-managedmssql-eastus]
module.storage[0].azurerm_storage_container.blob: Refreshing state... [id=https://hq1ydevstoracceastus.blob.core.windows.net/neubank-dev-sc-eastus]
module.storage[0].azurerm_private_endpoint.blob: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/neubank-dev-stendpt-eastus]
module.storage[0].azurerm_storage_blob.blob: Refreshing state... [id=https://hq1ydevstoracceastus.blob.core.windows.net/neubank-dev-sc-eastus/rr123.gif]
module.app_insights[0].azurerm_monitor_smart_detector_alert_rule.this: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.AlertsManagement/smartDetectorAlertRules/neubank-dev-frontend-smt-det-rule-eastus]
module.app_stack[0].azurerm_windows_web_app.frontend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus]
module.app_stack[0].azurerm_windows_web_app.backend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-backend-eastus]
module.network[0].module.endpoints.azurerm_private_endpoint.backend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/backwebappprivateendpoint]
module.network[0].module.endpoints.azurerm_app_service_virtual_network_swift_connection.frontend: Refreshing state... [id=/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus/config/virtualNetwork]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:

  • destroy

Terraform will perform the following actions:

azurerm_resource_group.this[0] will be destroyed

(because index [0] is out of range for count)

  • resource "azurerm_resource_group" "this" {
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus" -> null
    • location = "eastus" -> null
    • name = "neubank-dev-rg-eastus" -> null
    • tags = {

module.app_insights[0].azurerm_application_insights.this will be destroyed

(because module.app_insights[0] is not in configuration)

  • resource "azurerm_application_insights" "this" {
    • app_id = "b91ac68b-6e51-4742-b100-65d251674ba8" -> null
    • application_type = "web" -> null
    • connection_string = (sensitive value) -> null
    • daily_data_cap_in_gb = 100 -> null
    • daily_data_cap_notifications_disabled = false -> null
    • disable_ip_masking = false -> null
    • force_customer_storage_for_profiler = false -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Insights/components/neubank-dev-frontend-appins-eastus" -> null
    • instrumentation_key = (sensitive value) -> null
    • internet_ingestion_enabled = true -> null
    • internet_query_enabled = true -> null
    • local_authentication_disabled = false -> null
    • location = "eastus" -> null
    • name = "neubank-dev-frontend-appins-eastus" -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • retention_in_days = 90 -> null
    • sampling_percentage = 100 -> null
    • tags = {
    • workspace_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.OperationalInsights/workspaces/workspace" -> null
      }

module.app_insights[0].azurerm_log_analytics_workspace.this will be destroyed

(because module.app_insights[0] is not in configuration)

  • resource "azurerm_log_analytics_workspace" "this" {
    • allow_resource_only_permissions = true -> null
    • cmk_for_query_forced = false -> null
    • daily_quota_gb = -1 -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.OperationalInsights/workspaces/workspace" -> null
    • immediate_data_purge_on_30_days_enabled = false -> null
    • internet_ingestion_enabled = true -> null
    • internet_query_enabled = true -> null
    • local_authentication_disabled = false -> null
    • location = "eastus" -> null
    • name = "workspace" -> null
    • primary_shared_key = (sensitive value) -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • retention_in_days = 30 -> null
    • secondary_shared_key = (sensitive value) -> null
    • sku = "PerGB2018" -> null
    • tags = {
    • workspace_id = "9efb130c-afdf-46de-b706-b6c99639120e" -> null
      }

module.app_insights[0].azurerm_monitor_action_group.this will be destroyed

(because module.app_insights[0] is not in configuration)

  • resource "azurerm_monitor_action_group" "this" {
    • enabled = true -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Insights/actionGroups/neubank-dev-action-group-eastus" -> null
    • location = "global" -> null
    • name = "neubank-dev-action-group-eastus" -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • short_name = "devactgrp" -> null
    • tags = {

module.app_insights[0].azurerm_monitor_smart_detector_alert_rule.this will be destroyed

(because module.app_insights[0] is not in configuration)

  • resource "azurerm_monitor_smart_detector_alert_rule" "this" {
    • detector_type = "FailureAnomaliesDetector" -> null

    • enabled = true -> null

    • frequency = "PT1M" -> null

    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.AlertsManagement/smartDetectorAlertRules/neubank-dev-frontend-smt-det-rule-eastus" -> null

    • name = "neubank-dev-frontend-smt-det-rule-eastus" -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • scope_resource_ids = [

      • "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourcegroups/neubank-dev-rg-eastus/providers/microsoft.insights/components/neubank-dev-frontend-appins-eastus",
        ] -> null
    • severity = "Sev3" -> null

    • tags = {

    • action_group {

      • ids = [
        • "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourcegroups/neubank-dev-rg-eastus/providers/microsoft.insights/actiongroups/neubank-dev-action-group-eastus",
          ] -> null
          }
          }

module.app_stack[0].azurerm_service_plan.this will be destroyed

(because module.app_stack[0] is not in configuration)

  • resource "azurerm_service_plan" "this" {
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/serverFarms/neubank-dev-appserviceplan-eastus" -> null
    • kind = "app" -> null
    • location = "eastus" -> null
    • maximum_elastic_worker_count = 1 -> null
    • name = "neubank-dev-appserviceplan-eastus" -> null
    • os_type = "Windows" -> null
    • per_site_scaling_enabled = false -> null
    • reserved = false -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • sku_name = "P1v2" -> null
    • tags = {
    • worker_count = 1 -> null
    • zone_balancing_enabled = false -> null
      }

module.app_stack[0].azurerm_windows_web_app.backend will be destroyed

(because module.app_stack[0] is not in configuration)

  • resource "azurerm_windows_web_app" "backend" {
    • app_settings = {

      • "APPINSIGHTS_INSTRUMENTATIONKEY" = (sensitive value)
      • "APPLICATIONINSIGHTS_CONNECTION_STRING" = (sensitive value)
        } -> null
    • client_affinity_enabled = false -> null

    • client_certificate_enabled = false -> null

    • client_certificate_mode = "Required" -> null

    • custom_domain_verification_id = (sensitive value) -> null

    • default_hostname = "neubank-dev-backend-eastus.azurewebsites.net" -> null

    • enabled = true -> null

    • ftp_publish_basic_authentication_enabled = true -> null

    • https_only = true -> null

    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-backend-eastus" -> null

    • key_vault_reference_identity_id = "SystemAssigned" -> null

    • kind = "app" -> null

    • location = "eastus" -> null

    • name = "neubank-dev-backend-eastus" -> null

    • outbound_ip_address_list = [

      • "20.253.4.159",
      • "20.253.3.118",
      • "20.253.3.123",
      • "20.253.4.161",
      • "20.253.4.172",
      • "20.253.4.195",
      • "20.119.16.41",
        ] -> null
    • outbound_ip_addresses = "20.253.4.159,20.253.3.118,20.253.3.123,20.253.4.161,20.253.4.172,20.253.4.195,20.119.16.41" -> null

    • possible_outbound_ip_address_list = [

      • "20.127.254.244",
      • "20.241.172.75",
      • "20.253.3.212",
      • "20.253.4.35",
      • "20.253.4.110",
      • "20.253.4.148",
      • "20.253.4.159",
      • "20.253.3.118",
      • "20.253.3.123",
      • "20.253.4.161",
      • "20.253.4.172",
      • "20.253.4.195",
      • "20.253.4.227",
      • "20.253.4.228",
      • "20.253.4.245",
      • "20.253.5.18",
      • "20.253.5.22",
      • "20.241.168.150",
      • "20.253.5.25",
      • "20.241.168.165",
      • "20.241.174.52",
      • "20.253.3.102",
      • "20.253.2.82",
      • "20.253.3.51",
      • "20.253.2.86",
      • "20.253.3.22",
      • "20.253.5.93",
      • "20.253.1.46",
      • "20.253.2.77",
      • "20.241.171.135",
      • "20.119.16.41",
        ] -> null
    • possible_outbound_ip_addresses = "20.127.254.244,20.241.172.75,20.253.3.212,20.253.4.35,20.253.4.110,20.253.4.148,20.253.4.159,20.253.3.118,20.253.3.123,20.253.4.161,20.253.4.172,20.253.4.195,20.253.4.227,20.253.4.228,20.253.4.245,20.253.5.18,20.253.5.22,20.241.168.150,20.253.5.25,20.241.168.165,20.241.174.52,20.253.3.102,20.253.2.82,20.253.3.51,20.253.2.86,20.253.3.22,20.253.5.93,20.253.1.46,20.253.2.77,20.241.171.135,20.119.16.41" -> null

    • public_network_access_enabled = false -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • service_plan_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/serverFarms/neubank-dev-appserviceplan-eastus" -> null

    • site_credential = (sensitive value) -> null

    • tags = {

    • webdeploy_publish_basic_authentication_enabled = true -> null

    • site_config {

      • always_on = true -> null

      • auto_heal_enabled = false -> null

      • container_registry_use_managed_identity = false -> null

      • default_documents = [

        • "Default.htm",
        • "Default.html",
        • "Default.asp",
        • "index.htm",
        • "index.html",
        • "iisstart.htm",
        • "default.aspx",
        • "index.php",
        • "hostingstart.html",
          ] -> null
      • detailed_error_logging_enabled = false -> null

      • ftps_state = "Disabled" -> null

      • health_check_eviction_time_in_min = 0 -> null

      • http2_enabled = false -> null

      • load_balancing_mode = "LeastRequests" -> null

      • local_mysql_enabled = false -> null

      • managed_pipeline_mode = "Integrated" -> null

      • minimum_tls_version = "1.2" -> null

      • remote_debugging_enabled = false -> null

      • remote_debugging_version = "VS2019" -> null

      • scm_minimum_tls_version = "1.2" -> null

      • scm_type = "None" -> null

      • scm_use_main_ip_restriction = false -> null

      • use_32_bit_worker = true -> null

      • vnet_route_all_enabled = false -> null

      • websockets_enabled = false -> null

      • worker_count = 1 -> null

      • application_stack {

        • dotnet_version = "v4.0" -> null
        • java_embedded_server_enabled = false -> null
        • php_version = "5.6" -> null
        • python = false -> null
          }
          }
          }

module.app_stack[0].azurerm_windows_web_app.frontend will be destroyed

(because module.app_stack[0] is not in configuration)

  • resource "azurerm_windows_web_app" "frontend" {
    • app_settings = {

      • "APPINSIGHTS_INSTRUMENTATIONKEY" = (sensitive value)
      • "APPLICATIONINSIGHTS_CONNECTION_STRING" = (sensitive value)
      • "WEBSITE_DNS_SERVER" = "168.63.129.16"
        } -> null
    • client_affinity_enabled = false -> null

    • client_certificate_enabled = false -> null

    • client_certificate_mode = "Required" -> null

    • custom_domain_verification_id = (sensitive value) -> null

    • default_hostname = "neubank-dev-frontend-eastus.azurewebsites.net" -> null

    • enabled = true -> null

    • ftp_publish_basic_authentication_enabled = true -> null

    • https_only = true -> null

    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus" -> null

    • key_vault_reference_identity_id = "SystemAssigned" -> null

    • kind = "app" -> null

    • location = "eastus" -> null

    • name = "neubank-dev-frontend-eastus" -> null

    • outbound_ip_address_list = [

      • "20.253.4.159",
      • "20.253.3.118",
      • "20.253.3.123",
      • "20.253.4.161",
      • "20.253.4.172",
      • "20.253.4.195",
      • "20.119.16.41",
        ] -> null
    • outbound_ip_addresses = "20.253.4.159,20.253.3.118,20.253.3.123,20.253.4.161,20.253.4.172,20.253.4.195,20.119.16.41" -> null

    • possible_outbound_ip_address_list = [

      • "20.127.254.244",
      • "20.241.172.75",
      • "20.253.3.212",
      • "20.253.4.35",
      • "20.253.4.110",
      • "20.253.4.148",
      • "20.253.4.159",
      • "20.253.3.118",
      • "20.253.3.123",
      • "20.253.4.161",
      • "20.253.4.172",
      • "20.253.4.195",
      • "20.253.4.227",
      • "20.253.4.228",
      • "20.253.4.245",
      • "20.253.5.18",
      • "20.253.5.22",
      • "20.241.168.150",
      • "20.253.5.25",
      • "20.241.168.165",
      • "20.241.174.52",
      • "20.253.3.102",
      • "20.253.2.82",
      • "20.253.3.51",
      • "20.253.2.86",
      • "20.253.3.22",
      • "20.253.5.93",
      • "20.253.1.46",
      • "20.253.2.77",
      • "20.241.171.135",
      • "20.119.16.41",
        ] -> null
    • possible_outbound_ip_addresses = "20.127.254.244,20.241.172.75,20.253.3.212,20.253.4.35,20.253.4.110,20.253.4.148,20.253.4.159,20.253.3.118,20.253.3.123,20.253.4.161,20.253.4.172,20.253.4.195,20.253.4.227,20.253.4.228,20.253.4.245,20.253.5.18,20.253.5.22,20.241.168.150,20.253.5.25,20.241.168.165,20.241.174.52,20.253.3.102,20.253.2.82,20.253.3.51,20.253.2.86,20.253.3.22,20.253.5.93,20.253.1.46,20.253.2.77,20.241.171.135,20.119.16.41" -> null

    • public_network_access_enabled = false -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • service_plan_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/serverFarms/neubank-dev-appserviceplan-eastus" -> null

    • site_credential = (sensitive value) -> null

    • tags = {

    • virtual_network_subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus" -> null

    • webdeploy_publish_basic_authentication_enabled = true -> null

    • site_config {

      • always_on = true -> null

      • auto_heal_enabled = false -> null

      • container_registry_use_managed_identity = false -> null

      • default_documents = [

        • "Default.htm",
        • "Default.html",
        • "Default.asp",
        • "index.htm",
        • "index.html",
        • "iisstart.htm",
        • "default.aspx",
        • "index.php",
        • "hostingstart.html",
          ] -> null
      • detailed_error_logging_enabled = false -> null

      • ftps_state = "Disabled" -> null

      • health_check_eviction_time_in_min = 0 -> null

      • http2_enabled = false -> null

      • load_balancing_mode = "LeastRequests" -> null

      • local_mysql_enabled = false -> null

      • managed_pipeline_mode = "Integrated" -> null

      • minimum_tls_version = "1.2" -> null

      • remote_debugging_enabled = false -> null

      • remote_debugging_version = "VS2019" -> null

      • scm_minimum_tls_version = "1.2" -> null

      • scm_type = "None" -> null

      • scm_use_main_ip_restriction = false -> null

      • use_32_bit_worker = true -> null

      • vnet_route_all_enabled = true -> null

      • websockets_enabled = false -> null

      • worker_count = 1 -> null

      • application_stack {

        • dotnet_version = "v4.0" -> null
        • java_embedded_server_enabled = false -> null
        • php_version = "5.6" -> null
        • python = false -> null
          }
          }
          }

module.db[0].azurerm_mssql_managed_instance.db will be destroyed

(because module.db[0] is not in configuration)

  • resource "azurerm_mssql_managed_instance" "db" {
    • administrator_login = "humpbackadmin" -> null
    • administrator_login_password = (sensitive value) -> null
    • collation = "SQL_Latin1_General_CP1_CI_AS" -> null
    • dns_zone = "22d2b2c30909" -> null
    • fqdn = "neubank-dev-managedmssql-eastus.22d2b2c30909.database.windows.net" -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Sql/managedInstances/neubank-dev-managedmssql-eastus" -> null
    • license_type = "BasePrice" -> null
    • location = "eastus" -> null
    • maintenance_configuration_name = "SQL_Default" -> null
    • minimum_tls_version = "1.2" -> null
    • name = "neubank-dev-managedmssql-eastus" -> null
    • proxy_override = "Default" -> null
    • public_data_endpoint_enabled = false -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • sku_name = "GP_Gen5" -> null
    • storage_account_type = "GRS" -> null
    • storage_size_in_gb = 32 -> null
    • subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus" -> null
    • tags = {
    • timezone_id = "UTC" -> null
    • vcores = 8 -> null
      }

module.db[0].azurerm_network_security_group.db will be destroyed

(because module.db[0] is not in configuration)

  • resource "azurerm_network_security_group" "db" {
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-humpback-nsg-eastus" -> null
    • location = "eastus" -> null
    • name = "neubank-dev-humpback-nsg-eastus" -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • security_rule = [
      • {
        • access = "Allow"
        • description = "Allow Azure Load Balancer inbound traffic"
        • destination_address_prefix = "10.0.3.0/28"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "*"
        • destination_port_ranges = []
        • direction = "Inbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-healthprobe-in-10-0-3-0-28-v11"
        • priority = 100
        • protocol = "*"
        • source_address_prefix = "AzureLoadBalancer"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
      • {
        • access = "Allow"
        • description = "Allow AzureCloud outbound https traffic"
        • destination_address_prefix = "AzureCloud"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "443"
        • destination_port_ranges = []
        • direction = "Outbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-optional-azure-out-10-0-3-0-28"
        • priority = 100
        • protocol = "Tcp"
        • source_address_prefix = "10.0.3.0/28"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
      • {
        • access = "Allow"
        • description = "Allow MI internal inbound traffic"
        • destination_address_prefix = "10.0.3.0/28"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "*"
        • destination_port_ranges = []
        • direction = "Inbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-internal-in-10-0-3-0-28-v11"
        • priority = 101
        • protocol = "*"
        • source_address_prefix = "10.0.3.0/28"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
      • {
        • access = "Allow"
        • description = "Allow MI internal outbound traffic"
        • destination_address_prefix = "10.0.3.0/28"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "*"
        • destination_port_ranges = []
        • direction = "Outbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-internal-out-10-0-3-0-28-v11"
        • priority = 103
        • protocol = "*"
        • source_address_prefix = "10.0.3.0/28"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
      • {
        • access = "Allow"
        • description = "Allow communication with Azure Active Directory over https"
        • destination_address_prefix = "AzureActiveDirectory"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "443"
        • destination_port_ranges = []
        • direction = "Outbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-aad-out-10-0-3-0-28-v11"
        • priority = 101
        • protocol = "Tcp"
        • source_address_prefix = "10.0.3.0/28"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
      • {
        • access = "Allow"
        • description = "Allow communication with the One DS Collector over https"
        • destination_address_prefix = "OneDsCollector"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "443"
        • destination_port_ranges = []
        • direction = "Outbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-onedsc-out-10-0-3-0-28-v11"
        • priority = 102
        • protocol = "Tcp"
        • source_address_prefix = "10.0.3.0/28"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
      • {
        • access = "Allow"
        • description = "Allow outbound communication with storage over HTTPS"
        • destination_address_prefix = "Storage.eastus"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "443"
        • destination_port_ranges = []
        • direction = "Outbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-strg-p-out-10-0-3-0-28-v11"
        • priority = 104
        • protocol = "*"
        • source_address_prefix = "10.0.3.0/28"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
      • {
        • access = "Allow"
        • description = "Allow outbound communication with storage over HTTPS"
        • destination_address_prefix = "Storage.westus"
        • destination_address_prefixes = []
        • destination_application_security_group_ids = []
        • destination_port_range = "443"
        • destination_port_ranges = []
        • direction = "Outbound"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-strg-s-out-10-0-3-0-28-v11"
        • priority = 105
        • protocol = "*"
        • source_address_prefix = "10.0.3.0/28"
        • source_address_prefixes = []
        • source_application_security_group_ids = []
        • source_port_range = "*"
        • source_port_ranges = []
          },
          ] -> null
    • tags = {

module.db[0].azurerm_route_table.db will be destroyed

(because module.db[0] is not in configuration)

  • resource "azurerm_route_table" "db" {
    • disable_bgp_route_propagation = false -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/routeTables/neubank-dev-humpback-rt-eastus" -> null
    • location = "eastus" -> null
    • name = "neubank-dev-humpback-rt-eastus" -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • route = [
      • {
        • address_prefix = "10.0.3.0/28"
        • name = "Microsoft.Sql-managedInstances_UseOnly_subnet-10-0-3-0-28-to-vnetlocal"
        • next_hop_in_ip_address = ""
        • next_hop_type = "VnetLocal"
          },
      • {
        • address_prefix = "AzureActiveDirectory"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-AzureActiveDirectory"
        • next_hop_in_ip_address = ""
        • next_hop_type = "Internet"
          },
      • {
        • address_prefix = "AzureCloud.eastus"
        • name = "Microsoft.Sql-managedInstances_UseOnly_optional-AzureCloud.eastus"
        • next_hop_in_ip_address = ""
        • next_hop_type = "Internet"
          },
      • {
        • address_prefix = "AzureCloud.westus"
        • name = "Microsoft.Sql-managedInstances_UseOnly_optional-AzureCloud.westus"
        • next_hop_in_ip_address = ""
        • next_hop_type = "Internet"
          },
      • {
        • address_prefix = "OneDsCollector"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-OneDsCollector"
        • next_hop_in_ip_address = ""
        • next_hop_type = "Internet"
          },
      • {
        • address_prefix = "Storage.eastus"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-Storage.eastus"
        • next_hop_in_ip_address = ""
        • next_hop_type = "Internet"
          },
      • {
        • address_prefix = "Storage.westus"
        • name = "Microsoft.Sql-managedInstances_UseOnly_mi-Storage.westus"
        • next_hop_in_ip_address = ""
        • next_hop_type = "Internet"
          },
          ] -> null
    • subnets = [
      • "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus",
        ] -> null
    • tags = {} -> null
      }

module.db[0].azurerm_subnet.db will be destroyed

(because module.db[0] is not in configuration)

  • resource "azurerm_subnet" "db" {
    • address_prefixes = [

      • "10.0.3.0/28",
        ] -> null
    • enforce_private_link_endpoint_network_policies = false -> null

    • enforce_private_link_service_network_policies = false -> null

    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus" -> null

    • name = "neubank-dev-humpback-db-subnet-eastus" -> null

    • private_endpoint_network_policies_enabled = true -> null

    • private_link_service_network_policies_enabled = true -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • service_endpoint_policy_ids = [] -> null

    • service_endpoints = [] -> null

    • virtual_network_name = "neubank-dev-vnet-eastus" -> null

    • delegation {

      • name = "managedinstancedelegation" -> null

      • service_delegation {

        • actions = [
          • "Microsoft.Network/virtualNetworks/subnets/join/action",
          • "Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action",
          • "Microsoft.Network/virtualNetworks/subnets/unprepareNetworkPolicies/action",
            ] -> null
        • name = "Microsoft.Sql/managedInstances" -> null
          }
          }
          }

module.db[0].azurerm_subnet_network_security_group_association.db will be destroyed

(because module.db[0] is not in configuration)

  • resource "azurerm_subnet_network_security_group_association" "db" {
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus" -> null
    • network_security_group_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-humpback-nsg-eastus" -> null
    • subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus" -> null
      }

module.db[0].azurerm_subnet_route_table_association.db will be destroyed

(because module.db[0] is not in configuration)

  • resource "azurerm_subnet_route_table_association" "db" {
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus" -> null
    • route_table_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/routeTables/neubank-dev-humpback-rt-eastus" -> null
    • subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus" -> null
      }

module.db[0].random_password.password will be destroyed

(because module.db[0] is not in configuration)

  • resource "random_password" "password" {
    • bcrypt_hash = (sensitive value) -> null
    • id = "none" -> null
    • length = 20 -> null
    • lower = true -> null
    • min_lower = 1 -> null
    • min_numeric = 1 -> null
    • min_special = 1 -> null
    • min_upper = 1 -> null
    • number = true -> null
    • numeric = true -> null
    • result = (sensitive value) -> null
    • special = true -> null
    • upper = true -> null
      }

module.db[0].random_pet.db will be destroyed

(because module.db[0] is not in configuration)

  • resource "random_pet" "db" {
    • id = "humpback" -> null
    • length = 1 -> null
    • separator = "-" -> null
      }

module.network[0].azurerm_network_security_group.vnet will be destroyed

(because module.network[0] is not in configuration)

  • resource "azurerm_network_security_group" "vnet" {
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-vnetnsg-eastus" -> null
    • location = "eastus" -> null
    • name = "neubank-dev-vnetnsg-eastus" -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • security_rule = [] -> null
    • tags = {

module.network[0].azurerm_private_dns_zone.this will be destroyed

(because module.network[0] is not in configuration)

  • resource "azurerm_private_dns_zone" "this" {
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateDnsZones/privatelink.azurewebsites.net" -> null

    • max_number_of_record_sets = 25000 -> null

    • max_number_of_virtual_network_links = 1000 -> null

    • max_number_of_virtual_network_links_with_registration = 100 -> null

    • name = "privatelink.azurewebsites.net" -> null

    • number_of_record_sets = 3 -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • tags = {

    • soa_record {

      • email = "azureprivatedns-host.microsoft.com" -> null
      • expire_time = 2419200 -> null
      • fqdn = "privatelink.azurewebsites.net." -> null
      • host_name = "azureprivatedns.net" -> null
      • minimum_ttl = 10 -> null
      • refresh_time = 3600 -> null
      • retry_time = 300 -> null
      • serial_number = 1 -> null
      • tags = {} -> null
      • ttl = 3600 -> null
        }
        }

module.network[0].azurerm_virtual_network.this will be destroyed

(because module.network[0] is not in configuration)

  • resource "azurerm_virtual_network" "this" {
    • address_space = [
      • "10.0.0.0/16",
        ] -> null
    • dns_servers = [] -> null
    • flow_timeout_in_minutes = 0 -> null
    • guid = "57abd2c9-9a47-431e-bf5e-178f8fbbc966" -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus" -> null
    • location = "eastus" -> null
    • name = "neubank-dev-vnet-eastus" -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • subnet = [
      • {
        • address_prefix = "10.0.1.0/24"
        • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus"
        • name = "neubank-dev-integration-subnet-eastus"
        • security_group = ""
          },
      • {
        • address_prefix = "10.0.2.0/24"
        • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-endpoint-subnet-eastus"
        • name = "neubank-dev-endpoint-subnet-eastus"
        • security_group = ""
          },
      • {
        • address_prefix = "10.0.3.0/28"
        • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-humpback-db-subnet-eastus"
        • name = "neubank-dev-humpback-db-subnet-eastus"
        • security_group = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkSecurityGroups/neubank-dev-humpback-nsg-eastus"
          },
          ] -> null
    • tags = {

module.storage[0].azurerm_private_endpoint.blob will be destroyed

(because module.storage[0] is not in configuration)

  • resource "azurerm_private_endpoint" "blob" {
    • custom_dns_configs = [

      • {
        • fqdn = "hq1ydevstoracceastus.blob.core.windows.net"
        • ip_addresses = [
          • "10.0.2.4",
            ]
            },
            ] -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/neubank-dev-stendpt-eastus" -> null

    • location = "eastus" -> null

    • name = "neubank-dev-stendpt-eastus" -> null

    • network_interface = [

      • {
        • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkInterfaces/neubank-dev-stendpt-eastus.nic.1a04d2d1-9ed5-4173-a368-e4427c612c85"
        • name = "neubank-dev-stendpt-eastus.nic.1a04d2d1-9ed5-4173-a368-e4427c612c85"
          },
          ] -> null
    • private_dns_zone_configs = [] -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-endpoint-subnet-eastus" -> null

    • tags = {

    • private_service_connection {

      • is_manual_connection = false -> null
      • name = "example_psc" -> null
      • private_connection_resource_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Storage/storageAccounts/hq1ydevstoracceastus" -> null
      • private_ip_address = "10.0.2.4" -> null
      • subresource_names = [
        • "blob",
          ] -> null
          }
          }

module.storage[0].azurerm_storage_account.blob will be destroyed

(because module.storage[0] is not in configuration)

  • resource "azurerm_storage_account" "blob" {
    • access_tier = "Hot" -> null

    • account_kind = "StorageV2" -> null

    • account_replication_type = "LRS" -> null

    • account_tier = "Standard" -> null

    • allow_nested_items_to_be_public = false -> null

    • cross_tenant_replication_enabled = true -> null

    • default_to_oauth_authentication = false -> null

    • enable_https_traffic_only = true -> null

    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Storage/storageAccounts/hq1ydevstoracceastus" -> null

    • infrastructure_encryption_enabled = false -> null

    • is_hns_enabled = false -> null

    • location = "eastus" -> null

    • min_tls_version = "TLS1_2" -> null

    • name = "hq1ydevstoracceastus" -> null

    • nfsv3_enabled = false -> null

    • primary_access_key = (sensitive value) -> null

    • primary_blob_connection_string = (sensitive value) -> null

    • primary_blob_endpoint = "https://hq1ydevstoracceastus.blob.core.windows.net/" -> null

    • primary_blob_host = "hq1ydevstoracceastus.blob.core.windows.net" -> null

    • primary_connection_string = (sensitive value) -> null

    • primary_dfs_endpoint = "https://hq1ydevstoracceastus.dfs.core.windows.net/" -> null

    • primary_dfs_host = "hq1ydevstoracceastus.dfs.core.windows.net" -> null

    • primary_file_endpoint = "https://hq1ydevstoracceastus.file.core.windows.net/" -> null

    • primary_file_host = "hq1ydevstoracceastus.file.core.windows.net" -> null

    • primary_location = "eastus" -> null

    • primary_queue_endpoint = "https://hq1ydevstoracceastus.queue.core.windows.net/" -> null

    • primary_queue_host = "hq1ydevstoracceastus.queue.core.windows.net" -> null

    • primary_table_endpoint = "https://hq1ydevstoracceastus.table.core.windows.net/" -> null

    • primary_table_host = "hq1ydevstoracceastus.table.core.windows.net" -> null

    • primary_web_endpoint = "https://hq1ydevstoracceastus.z13.web.core.windows.net/" -> null

    • primary_web_host = "hq1ydevstoracceastus.z13.web.core.windows.net" -> null

    • public_network_access_enabled = true -> null

    • queue_encryption_key_type = "Service" -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • secondary_access_key = (sensitive value) -> null

    • secondary_connection_string = (sensitive value) -> null

    • sftp_enabled = false -> null

    • shared_access_key_enabled = true -> null

    • table_encryption_key_type = "Service" -> null

    • tags = {

    • blob_properties {

      • change_feed_enabled = false -> null

      • change_feed_retention_in_days = 0 -> null

      • last_access_time_enabled = false -> null

      • versioning_enabled = false -> null

      • delete_retention_policy {

        • days = 7 -> null
          }
          }
    • network_rules {

      • bypass = [
        • "AzureServices",
          ] -> null
      • default_action = "Allow" -> null
      • ip_rules = [] -> null
      • virtual_network_subnet_ids = [] -> null
        }
    • queue_properties {

      • hour_metrics {
        • enabled = true -> null
        • include_apis = true -> null
        • retention_policy_days = 7 -> null
        • version = "1.0" -> null
          }
      • logging {
        • delete = false -> null
        • read = false -> null
        • retention_policy_days = 0 -> null
        • version = "1.0" -> null
        • write = false -> null
          }
      • minute_metrics {
        • enabled = false -> null
        • include_apis = false -> null
        • retention_policy_days = 0 -> null
        • version = "1.0" -> null
          }
          }
    • sas_policy {

      • expiration_action = "Log" -> null
      • expiration_period = "90.00:00:00" -> null
        }
    • share_properties {

      • retention_policy {
        • days = 7 -> null
          }
          }
          }

module.storage[0].azurerm_storage_blob.blob will be destroyed

(because module.storage[0] is not in configuration)

module.storage[0].azurerm_storage_container.blob will be destroyed

(because module.storage[0] is not in configuration)

  • resource "azurerm_storage_container" "blob" {
    • container_access_type = "private" -> null
    • has_immutability_policy = false -> null
    • has_legal_hold = false -> null
    • id = "https://hq1ydevstoracceastus.blob.core.windows.net/neubank-dev-sc-eastus" -> null
    • metadata = {} -> null
    • name = "neubank-dev-sc-eastus" -> null
    • resource_manager_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Storage/storageAccounts/hq1ydevstoracceastus/blobServices/default/containers/neubank-dev-sc-eastus" -> null
    • storage_account_name = "hq1ydevstoracceastus" -> null
      }

module.storage[0].random_string.sac will be destroyed

(because module.storage[0] is not in configuration)

  • resource "random_string" "sac" {
    • id = "hq1y" -> null
    • length = 4 -> null
    • lower = true -> null
    • min_lower = 0 -> null
    • min_numeric = 0 -> null
    • min_special = 0 -> null
    • min_upper = 0 -> null
    • number = true -> null
    • numeric = true -> null
    • result = "hq1y" -> null
    • special = false -> null
    • upper = false -> null
      }

module.network[0].module.endpoints.azurerm_app_service_virtual_network_swift_connection.frontend will be destroyed

(because module.network[0].module.endpoints is not in configuration)

  • resource "azurerm_app_service_virtual_network_swift_connection" "frontend" {
    • app_service_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus" -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-frontend-eastus/config/virtualNetwork" -> null
    • subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus" -> null
      }

module.network[0].module.endpoints.azurerm_private_endpoint.backend will be destroyed

(because module.network[0].module.endpoints is not in configuration)

  • resource "azurerm_private_endpoint" "backend" {
    • custom_dns_configs = [] -> null

    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/backwebappprivateendpoint" -> null

    • location = "eastus" -> null

    • name = "backwebappprivateendpoint" -> null

    • network_interface = [

      • {
        • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/networkInterfaces/backwebappprivateendpoint.nic.1ad13b90-b12a-4a19-a968-138197290cc2"
        • name = "backwebappprivateendpoint.nic.1ad13b90-b12a-4a19-a968-138197290cc2"
          },
          ] -> null
    • private_dns_zone_configs = [

      • {
        • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/backwebappprivateendpoint/privateDnsZoneGroups/privatednszonegroup/privateDnsZoneConfigs/privatelink.azurewebsites.net"
        • name = "privatelink.azurewebsites.net"
        • private_dns_zone_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateDnsZones/privatelink.azurewebsites.net"
        • record_sets = [
          • {
            • fqdn = "neubank-dev-backend-eastus.privatelink.azurewebsites.net"
            • ip_addresses = [
              • "10.0.2.5",
                ]
            • name = "neubank-dev-backend-eastus"
            • ttl = 10
            • type = "A"
              },
          • {
            • fqdn = "neubank-dev-backend-eastus.scm.privatelink.azurewebsites.net"
            • ip_addresses = [
              • "10.0.2.5",
                ]
            • name = "neubank-dev-backend-eastus.scm"
            • ttl = 10
            • type = "A"
              },
              ]
              },
              ] -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • subnet_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-endpoint-subnet-eastus" -> null

    • tags = {

    • private_dns_zone_group {

      • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateEndpoints/backwebappprivateendpoint/privateDnsZoneGroups/privatednszonegroup" -> null
      • name = "privatednszonegroup" -> null
      • private_dns_zone_ids = [
        • "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/privateDnsZones/privatelink.azurewebsites.net",
          ] -> null
          }
    • private_service_connection {

      • is_manual_connection = false -> null
      • name = "privateendpointconnection" -> null
      • private_connection_resource_id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Web/sites/neubank-dev-backend-eastus" -> null
      • private_ip_address = "10.0.2.5" -> null
      • subresource_names = [
        • "sites",
          ] -> null
          }
          }

module.network[0].module.subnets.azurerm_subnet.endpoint will be destroyed

(because module.network[0].module.subnets is not in configuration)

  • resource "azurerm_subnet" "endpoint" {
    • address_prefixes = [
      • "10.0.2.0/24",
        ] -> null
    • enforce_private_link_endpoint_network_policies = false -> null
    • enforce_private_link_service_network_policies = false -> null
    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-endpoint-subnet-eastus" -> null
    • name = "neubank-dev-endpoint-subnet-eastus" -> null
    • private_endpoint_network_policies_enabled = true -> null
    • private_link_service_network_policies_enabled = true -> null
    • resource_group_name = "neubank-dev-rg-eastus" -> null
    • service_endpoint_policy_ids = [] -> null
    • service_endpoints = [
      • "Microsoft.Storage",
        ] -> null
    • virtual_network_name = "neubank-dev-vnet-eastus" -> null
      }

module.network[0].module.subnets.azurerm_subnet.integration will be destroyed

(because module.network[0].module.subnets is not in configuration)

  • resource "azurerm_subnet" "integration" {
    • address_prefixes = [

      • "10.0.1.0/24",
        ] -> null
    • enforce_private_link_endpoint_network_policies = false -> null

    • enforce_private_link_service_network_policies = false -> null

    • id = "/subscriptions/0aefc6aa-dc19-476c-8bd2-37c1708fd084/resourceGroups/neubank-dev-rg-eastus/providers/Microsoft.Network/virtualNetworks/neubank-dev-vnet-eastus/subnets/neubank-dev-integration-subnet-eastus" -> null

    • name = "neubank-dev-integration-subnet-eastus" -> null

    • private_endpoint_network_policies_enabled = true -> null

    • private_link_service_network_policies_enabled = true -> null

    • resource_group_name = "neubank-dev-rg-eastus" -> null

    • service_endpoint_policy_ids = [] -> null

    • service_endpoints = [] -> null

    • virtual_network_name = "neubank-dev-vnet-eastus" -> null

    • delegation {

      • name = "delegation" -> null

      • service_delegation {

        • actions = [
          • "Microsoft.Network/virtualNetworks/subnets/action",
            ] -> null
        • name = "Microsoft.Web/serverFarms" -> null
          }
          }
          }

Plan: 0 to add, 0 to change, 28 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
terraform apply "tfplan"

Show Checkov Results

terraform scan results:

check_id file resource check_name guideline
0 CKV_AZURE_59 /modules/storage/main.tf module.storage.azurerm_storage_account.blob Ensure that Storage accounts disallow public access https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-networking-policies/ensure-that-storage-accounts-disallow-public-access
1 CKV2_AZURE_41 /modules/storage/main.tf module.storage.azurerm_storage_account.blob Ensure storage account is configured with SAS expiration policy https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-iam-policies/bc-azure-2-41
2 CKV2_AZURE_40 /modules/storage/main.tf module.storage.azurerm_storage_account.blob Ensure storage account is not configured with Shared Key authorization https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-iam-policies/bc-azure-2-40
3 CKV2_AZURE_31 /modules/network/subnets/main.tf module.network.module.subnets.azurerm_subnet.endpoint Ensure VNET subnet is configured with a Network Security Group (NSG) https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-general-policies/bc-azure-2-31
4 CKV2_AZURE_31 /modules/network/subnets/main.tf module.network.module.subnets.azurerm_subnet.integration Ensure VNET subnet is configured with a Network Security Group (NSG) https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-general-policies/bc-azure-2-31

Pusher: @dbwest, Action: pull_request, Working Directory: ``, Workflow: Terraform Dev

@dbwest dbwest deleted the branch dev January 27, 2024 17:22
@dbwest dbwest closed this Jan 27, 2024
@dbwest dbwest deleted the disable_dev branch January 27, 2024 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants