Support for azurerm_network_ddos_protection_plan_association

[jonas-budde]

Is there an existing issue for this?

• I have searched the existing issues

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave comments along the lines of "+1", "me too" or "any updates", they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Description

It should also be possible to assign a DDOS Protection Plan to a VNET in a separate resource. This is useful if the VNET is not created in the respective root, but is referenced via a data object.

Name for this resource could be azurerm_network_ddos_protection_plan_association or azurerm_virtual_network_ddos_protection_plan_association.

New or Affected Resource(s)/Data Source(s)

azurerm_network_ddos_protection_plan_association

Potential Terraform Configuration

locals {
  location = "germanywestcentral"
}

resource "azurerm_resource_group" "this" {
  name     = "rg-test-01"
  location = local.location
}

resource "azurerm_network_ddos_protection_plan" "this" {
  name                = "ddpp-01"
  location            = local.location
  resource_group_name = azurerm_resource_group.this.name
}

data "azurerm_virtual_network" "spoke" {
  name                = "vnet-spoke"
  resource_group_name = azurerm_resource_group.this.name
}

resource "azurerm_network_ddos_protection_plan_association" "spoke_vnet" {
  virtual_network_id     = azurerm_virtual_network.spoke.id
  ddos_protecton_plan_id = azurerm_network_ddos_protection_plan.id
}

References

No response