adaptive.run TECH BLOG

Here's an example of a Bicep template that deploys an Azure Firewall with a ruleset that requires all traffic to be authenticated by Azure Active Directory:

// Create the firewall resource
resource firewall 'Microsoft.Network/firewalls' = {
name: 'myFirewall',
location: resourceGroup().location,
properties: {
firewallPolicy: {
id: ''
},
threatIntelMode: 'Alert',
virtualHub: {
id: ''
}
}
}

// Create the Azure AD Connector resource
resource connector 'Microsoft.Network/firewall/azureFirewallNetworkRuleSets' = {
name: 'AADConnect',
location: resourceGroup().location,
properties: {
authenticationMethod: 'AzureActiveDirectory',
ruleSetType: 'AzureFirewallApplicationRuleCollection',
ruleSetName: 'AADConnect'
}
}

// Create the rule collection for the Azure AD Connector
resource ruleSet 'Microsoft.Network/firewall/azureFirewallApplicationRuleCollections' = {
name: firewall.name + '/AADConnect/' + connector.name,
properties: {
ruleGroups: [
{
name: 'Allow Azure AD Connected Traffic',
rules: [
{
name: 'Allow All Traffic',
actions: [
'Allow'
],
sourceAddresses: [
'AzureActiveDirectory'
]
}
]
}
]
}
}