A set of modules for using Palo Alto Networks Software Firewalls to provide control and protection to your applications running on Azure Cloud. It deploys Software Firewalls and it configures aspects such as virtual networks, subnets, network security groups, storage accounts, service principals, Panorama virtual machine instances, and more.
The design is heavily based on the Reference Architecture Guide for Azure.
For copyright and license see the LICENSE file.
This repository has the following directory structure:
modules- this directory contains several standalone, reusable, production-grade Terraform modules. Each module is individually documented.examples- this directory shows examples of different ways to combine the modules contained in themodulesdirectory.
Notice, this code should NOT be used directly in production. It might contain examples of sensitive data that normally should not be kept in a repository.
Please keep in mind that modules hosted in this repository require sensitive data to work, like: passwords, firewall bootstrap options, etc. We do not provide a mechanism to safely store this information. It's up to you to make sure this data is safely kept.
Examples provided here are a form of documentation - they should help you understand how to use the modules. They were not written with security in mind. They are here to demonstrate how to utilize code available in this repository and sometimes it's not possible to do it w/o providing variables or data that normally (in production) would not be kept in a VCS.
So before you use this code for something different than training please keep in mind to follow all Terraform and your organization's security best practices.
The compatibility with Terraform is defined individually per each module. In general, expect the earliest compatible Terraform version to be 1.0.0 across most of the modules.
These modules follow the principles of Semantic Versioning. You can find each new release, along with the changelog, on the GitHub Releases page.
If you have found a bug, please report it. The preferred way is to create a new issue on the GitHub issue page.
For consulting support, please contact [email protected] or your Palo Alto Networks account manager.
Contributions are welcome, and they are greatly appreciated! Every little bit helps, and credit will always be given. Please follow our contributing guide.