main.tf

terraform {
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "~> 3.113.0"
    }
  }

  required_version = ">= 1.1.0"
}

provider "azurerm" {
  features {}
}

resource "azurerm_virtual_network" "dev-playground-net" {
  name                = "dev-playground-net"
  address_space       = ["10.0.0.0/16"]
  location            = azurerm_resource_group.dev-playground-rg.location
  resource_group_name = azurerm_resource_group.dev-playground-rg.name
  tags = {
    env = "dev"
  }
}

resource "azurerm_subnet" "dev-playground-subnet" {
  name                 = "dev-playground-subnet"
  resource_group_name  = azurerm_resource_group.dev-playground-rg.name
  virtual_network_name = azurerm_virtual_network.dev-playground-net.name
  address_prefixes     = ["10.0.2.0/24"]
}

resource "azurerm_network_security_group" "dev-playground-net-sg" {
  name                = "dev-playground-net-sg"
  location            = azurerm_resource_group.dev-playground-rg.location
  resource_group_name = azurerm_resource_group.dev-playground-rg.name
  tags = {
    env = "dev"
  }
}

resource "azurerm_network_security_rule" "dev-playground-net-sr" {
  name                        = "dev-playground-net-sr"
  priority                    = 100
  direction                   = "Inbound"
  access                      = "Allow"
  protocol                    = "*"
  source_port_range           = "*"
  destination_port_range      = "*"
  source_address_prefix       = "*"
  destination_address_prefix  = "*"
  resource_group_name         = azurerm_resource_group.dev-playground-rg.name
  network_security_group_name = azurerm_network_security_group.dev-playground-net-sg.name
}

data "azurerm_subscription" "playground" {}

resource "azurerm_role_definition" "dev-playground-role-devops" {
  name        = "dev-playground-role-devops"
  scope       = data.azurerm_subscription.playground.id
  description = "DevOps Engineer for DEV Environment"

  permissions {
    actions = ["Microsoft.AlertsManagement/alerts/read"]
  }
}