Add Firewall Policy module

modules/firewall-policy/CHANGELOG.md

@@ -0,0 +1 @@
+# Changelog

modules/firewall-policy/README.md

@@ -0,0 +1,30 @@
+# Firewall Policy
+
+This module creates a [Firewall Policy](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/firewall_policy).
+
+## Usage
+
+```hcl
+module "firewall_policy" {
+  source = "https://github.com/gofrontier-com/azurerm-terraform-modules/releases/download/firewall-policy/[VERSION]/module.tar.gz//src"
+
+  environment         = "dev"
+  identifier          = "customerbanking"
+  location            = "uksouth"
+  resource_group_name = module.resource_group.name
+  zone                = "pla"
+
+  tags = {
+    WorkloadType = "PlatformLZ/firewall-policy"
+  }
+}
+
+```
+
+## Known issues
+
+_None._
+
+## Contributing
+
+See <https://github.com/gofrontier-com/azurerm-terraform-modules/blob/main/README.rst#contributing>.

modules/firewall-policy/VERSION

@@ -0,0 +1 @@
+1.0

modules/firewall-policy/src/locals.tf

@@ -0,0 +1,14 @@
+locals {
+  identifier = replace(lower(var.identifier), "/[^a-z1-9]/", "")
+
+  short_locations = {
+    "uksouth" = "uks"
+    "ukwest"  = "ukw"
+  }
+
+  tags = {
+    Environment = var.environment
+    Location    = var.location
+    Zone        = var.zone
+  }
+}

modules/firewall-policy/src/main.tf

@@ -0,0 +1,20 @@
+resource "azurerm_firewall_policy" "main" {
+  name                = "fwpol-${var.zone}-${var.environment}-${lookup(local.short_locations, var.location)}-${local.identifier}"
+  resource_group_name = var.resource_group_name
+  location            = var.location
+
+  base_policy_id = var.base_policy_id
+
+  sku = var.sku
+
+  dynamic "dns" {
+    for_each = length(var.dns_servers) > 0 ? [{}] : []
+
+    content {
+      proxy_enabled = true
+      servers       = var.dns_servers
+    }
+  }
+
+  tags = merge(var.tags, local.tags)
+}

modules/firewall-policy/src/outputs.tf

@@ -0,0 +1,7 @@
+output "id" {
+  value = azurerm_firewall_policy.main.id
+}
+
+output "name" {
+  value = azurerm_firewall_policy.main.name
+}

modules/firewall-policy/src/variables.tf

@@ -0,0 +1,39 @@
+variable "base_policy_id" {
+  type    = string
+  default = null
+}
+
+variable "dns_servers" {
+  type    = list(string)
+  default = []
+}
+
+variable "environment" {
+  type = string
+}
+
+variable "identifier" {
+  type = string
+}
+
+variable "location" {
+  type = string
+}
+
+variable "resource_group_name" {
+  type = string
+}
+
+variable "sku" {
+  type    = string
+  default = "Standard"
+}
+
+variable "tags" {
+  type    = map(string)
+  default = {}
+}
+
+variable "zone" {
+  type = string
+}

modules/firewall-policy/test/main.tf

@@ -0,0 +1,17 @@
+provider "azurerm" {
+  features {}
+}
+
+module "firewall_policy" {
+  source = "../src"
+
+  environment         = "foo"
+  identifier          = "bar"
+  location            = "uksouth"
+  resource_group_name = "baz"
+  zone                = "qux"
+
+  tags = {
+    Foo = "Bar"
+  }
+}

modules/firewall-policy/test/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = "~> 1.5"
+
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "~> 3.85"
+    }
+  }
+}