Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft.Network/firewallPolicies - WhatIf noise #383

Open
janegilring opened this issue Dec 6, 2024 · 0 comments
Open

Microsoft.Network/firewallPolicies - WhatIf noise #383

janegilring opened this issue Dec 6, 2024 · 0 comments

Comments

@janegilring
Copy link

janegilring commented Dec 6, 2024

Describe the noise

ipv6rule: false is shown as being removed, although no such property can be configured in the API nor the portal.

Resource type (i.e. Microsoft.Storage/storageAccounts)
Microsoft.Network/firewallPolicies

apiVersion (i.e. 2019-04-01)
2023-04-01

Client (PowerShell, Azure CLI, or API)
PowerShell

Relevant ARM Template code (we only need the resource object for the above resourceType and apiVersion, but if it's easier you can include the entire template

module firewallPolicy 'br/public:avm/res/network/firewall-policy:0.1.3' = {
  name: 'firewallPolicyDeployment'
  params: {
    // Required parameters
    tier: 'Premium'
    name: 'azfwpolicy-norwayeast'

    // Non-required parameters
    allowSqlRedirect: false
    autoLearnPrivateRanges: 'Enabled'
    enableProxy: true
    servers: [
      '10.48.12.68'
    ]
    location: location
    ruleCollectionGroups: [
      //************************** Rule Collection Group RCG-Internet start ************************************
      {
        name: 'RCG-Internet'
        priority: 1000
        ruleCollections: [
          //************************ Network Rule Collection NRC-Internet start **********************************
          {
            action: {
              type: 'Allow'
            }
            name: 'NRC-Internet'
            priority: 1000
            ruleCollectionType: 'FirewallPolicyFilterRuleCollection'
            rules: [
              //###################### Network Rule Internet-53 start ######################################### 
              {
                destinationAddresses: [
                  '8.8.8.8'
                  '8.8.4.4'
                ]
                destinationFqdns: []
                destinationIpGroups: []
                destinationPorts: [
                  '53'
                ]
                ipProtocols: [
                  'TCP'
                  'UDP'
                ]
                name: 'Internet-53'
                ruleType: 'NetworkRule'
                sourceAddresses: []
                sourceIpGroups: [
                  AzureLZnetworks
                ]
              }
              //###################### Network Rule Internet-53 end  ##################################################
              //###################### Network Rule Internet-443 start ######################################### 
              {
                destinationAddresses: [
                  '*'
                ]
                destinationFqdns: []
                destinationIpGroups: []
                destinationPorts: [
                  '443'
                ]
                ipProtocols: [
                  'TCP'
                  'UDP'
                ]
                name: 'Internet-443'
                ruleType: 'NetworkRule'
                sourceAddresses: []
                sourceIpGroups: [
                  AzureLZnetworks
                ]
              }
}

Expected response (i.e. "I expected no noise since the template has not been modified since the resources were deployed)
I expected no noise since the template has not been modified since the resources were deployed

Current (noisy) response (either include a screenshot of the what-if output, or copy/paste the text)

ipv6rule: false

Image

Additional context
Add any other context about the problem here.

@janegilring janegilring changed the title microsoft.network/azurefirewalls - WhatIf noise Microsoft.Network/firewallPolicies - WhatIf noise Dec 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant