feat: enable public network access (#66)

equinor · Aug 21, 2023 · c963c3d · c963c3d
1 parent d94484e
commit c963c3d
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -31,14 +31,16 @@ resource "azurerm_key_vault" "this" {
   access_policy             = local.access_policies
   enable_rbac_authorization = var.enable_rbac_authorization
 
-  tags = var.tags
+  public_network_access_enabled = var.public_network_access_enabled
 
   network_acls {
     default_action             = "Deny"
     bypass                     = var.network_acls_bypass_azure_services ? "AzureServices" : "None"
     ip_rules                   = var.network_acls_ip_rules
     virtual_network_subnet_ids = var.network_acls_virtual_network_subnet_ids
   }
+
+  tags = var.tags
 }
 
 resource "azurerm_monitor_diagnostic_setting" "this" {

diff --git a/variables.tf b/variables.tf
@@ -42,6 +42,12 @@ variable "enable_rbac_authorization" {
   default     = true
 }
 
+variable "public_network_access_enabled" {
+  description = "Should public network access be enabled for this Key Vault?"
+  type        = bool
+  default     = true
+}
+
 variable "network_acls_bypass_azure_services" {
   description = "Should Azure services be allowed to bypass the network ACLs of this Key Vault?."
   type        = bool