@@ -25,18 +25,18 @@ resource "azurerm_network_security_group" "nsg" {
25
25
resource "azurerm_network_security_rule" "predefined_rules" {
26
26
count = var. use_for_each ? 0 : length (var. predefined_rules )
27
27
28
- access = element (var. rules [lookup ( var. predefined_rules [count . index ], " name" ) ], 1 )
29
- direction = element (var. rules [lookup ( var. predefined_rules [count . index ], " name" ) ], 0 )
30
- name = lookup ( var. predefined_rules [count . index ], " name" )
28
+ access = element (var. rules [var . predefined_rules [count . index ][ " name" ] ], 1 )
29
+ direction = element (var. rules [var . predefined_rules [count . index ][ " name" ] ], 0 )
30
+ name = var. predefined_rules [count . index ][ " name" ]
31
31
network_security_group_name = azurerm_network_security_group. nsg . name
32
32
priority = lookup (var. predefined_rules [count . index ], " priority" , 4096 - length (var. predefined_rules ) + count. index )
33
- protocol = element (var. rules [lookup ( var. predefined_rules [count . index ], " name" ) ], 2 )
33
+ protocol = element (var. rules [var . predefined_rules [count . index ][ " name" ] ], 2 )
34
34
resource_group_name = data. azurerm_resource_group . nsg . name
35
- description = element (var. rules [lookup ( var. predefined_rules [count . index ], " name" ) ], 5 )
35
+ description = element (var. rules [var . predefined_rules [count . index ][ " name" ] ], 5 )
36
36
destination_address_prefix = lookup (var. predefined_rules [count . index ], " destination_application_security_group_ids" , null ) == null && var. destination_address_prefixes == null ? join (" ," , var. destination_address_prefix ) : null
37
37
destination_address_prefixes = lookup (var. predefined_rules [count . index ], " destination_application_security_group_ids" , null ) == null ? var. destination_address_prefixes : null
38
38
destination_application_security_group_ids = lookup (var. predefined_rules [count . index ], " destination_application_security_group_ids" , null )
39
- destination_port_range = element (var. rules [lookup ( var. predefined_rules [count . index ], " name" ) ], 4 )
39
+ destination_port_range = element (var. rules [var . predefined_rules [count . index ][ " name" ] ], 4 )
40
40
source_address_prefix = lookup (var. predefined_rules [count . index ], " source_application_security_group_ids" , null ) == null && var. source_address_prefixes == null ? join (" ," , var. source_address_prefix ) : null
41
41
source_address_prefixes = lookup (var. predefined_rules [count . index ], " source_application_security_group_ids" , null ) == null ? var. source_address_prefixes : null
42
42
source_application_security_group_ids = lookup (var. predefined_rules [count . index ], " source_application_security_group_ids" , null )
@@ -47,18 +47,18 @@ resource "azurerm_network_security_rule" "predefined_rules" {
47
47
resource "azurerm_network_security_rule" "predefined_rules_for" {
48
48
for_each = { for value in var . predefined_rules : value . name => value if var . use_for_each }
49
49
50
- access = element (var. rules [lookup ( each. value , " name" ) ], 1 )
51
- direction = element (var. rules [lookup ( each. value , " name" ) ], 0 )
52
- name = lookup ( each. value , " name" )
50
+ access = element (var. rules [each . value [ " name" ] ], 1 )
51
+ direction = element (var. rules [each . value [ " name" ] ], 0 )
52
+ name = each. value [ " name" ]
53
53
network_security_group_name = azurerm_network_security_group. nsg . name
54
54
priority = each. value . priority
55
- protocol = element (var. rules [lookup ( each. value , " name" ) ], 2 )
55
+ protocol = element (var. rules [each . value [ " name" ] ], 2 )
56
56
resource_group_name = data. azurerm_resource_group . nsg . name
57
- description = element (var. rules [lookup ( each. value , " name" ) ], 5 )
57
+ description = element (var. rules [each . value [ " name" ] ], 5 )
58
58
destination_address_prefix = lookup (each. value , " destination_application_security_group_ids" , null ) == null && var. destination_address_prefixes == null ? join (" ," , var. destination_address_prefix ) : null
59
59
destination_address_prefixes = lookup (each. value , " destination_application_security_group_ids" , null ) == null ? var. destination_address_prefixes : null
60
60
destination_application_security_group_ids = lookup (each. value , " destination_application_security_group_ids" , null )
61
- destination_port_range = element (var. rules [lookup ( each. value , " name" ) ], 4 )
61
+ destination_port_range = element (var. rules [each . value [ " name" ] ], 4 )
62
62
source_address_prefix = lookup (each. value , " source_application_security_group_ids" , null ) == null && var. source_address_prefixes == null ? join (" ," , var. source_address_prefix ) : null
63
63
source_address_prefixes = lookup (each. value , " source_application_security_group_ids" , null ) == null ? var. source_address_prefixes : null
64
64
source_application_security_group_ids = lookup (each. value , " source_application_security_group_ids" , null )
@@ -84,7 +84,7 @@ resource "azurerm_network_security_rule" "custom_rules" {
84
84
direction = lookup (var. custom_rules [count . index ], " direction" , " Inbound" )
85
85
name = lookup (var. custom_rules [count . index ], " name" , " default_rule_name" )
86
86
network_security_group_name = azurerm_network_security_group. nsg . name
87
- priority = lookup ( var. custom_rules [count . index ], " priority" )
87
+ priority = var. custom_rules [count . index ][ " priority" ]
88
88
protocol = lookup (var. custom_rules [count . index ], " protocol" , " *" )
89
89
resource_group_name = data. azurerm_resource_group . nsg . name
90
90
description = lookup (var. custom_rules [count . index ], " description" , " Security rule for ${ lookup (var. custom_rules [count . index ], " name" , " default_rule_name" )} " )
0 commit comments