Allow to pass allowed Client IP list for Cosmos DB

wso2 · Oct 23, 2024 · 2a5ef88 · 2a5ef88
1 parent c9d495f
commit 2a5ef88
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/modules/azurerm/Cosmos-Database-Account/cosmos_database_account.tf b/modules/azurerm/Cosmos-Database-Account/cosmos_database_account.tf
@@ -18,6 +18,7 @@ resource "azurerm_cosmosdb_account" "cosmos_db_account" {
   tags                              = var.tags
   enable_free_tier                  = var.enable_free_tier
   public_network_access_enabled     = var.public_network_access_enabled
+  ip_range_filter                   = var.ip_range_filter
   enable_multiple_write_locations   = var.enable_multiple_write_locations
   enable_automatic_failover         = length(local.geo_locations) == 1 ? false : var.enable_automatic_failover
   is_virtual_network_filter_enabled = var.is_virtual_network_filter_enabled

diff --git a/modules/azurerm/Cosmos-Database-Account/variables.tf b/modules/azurerm/Cosmos-Database-Account/variables.tf
@@ -142,3 +142,9 @@ variable "analytical_storage_enabled" {
   description = "Enable Analytical Storage option for the Cosmos DB account"
   type        = bool
 }
+
+variable "ip_range_filter" {
+  default     = null
+  description = "A set of IP addresses or IP address ranges in CIDR form to be included as the allowed list of client IPs"
+  type        = string
+}