Merge pull request #4 from qbeyond/feature/add-appclication-rule-for-…

…windows-update

Feature/add appclication rule for windows update

CHANGELOG.md

@@ -0,0 +1,26 @@
+# Changelog
+
+All notable changes to this module will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this module adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [1.1.0] - 2023-11-17
+
+### Added
+
+- application rule for windows update
+
+### Changed
+
+### Removed
+
+### Fixed
+
+- windows defender can find and download updates
+
+# [1.0.0] - 2023-07-07
+
+Initial release of platform firewall rules

main.tf

@@ -76,4 +76,24 @@ resource "azurerm_firewall_policy_rule_collection_group" "this" {
       destination_ports     = ["80", "443"]
     }
   }
+
+  application_rule_collection {
+    name     = "rc-application_internet_outbound-${var.stage}"
+    priority = 130
+    action   = "Allow"
+
+    rule {
+      name                  = "allow-update-management-outbound"
+      source_ip_groups      = [var.ipg_application_lz_id, var.ipg_platform_id]
+      destination_fqdn_tags = ["WindowsUpdate"]
+      protocols {
+        type = "Http"
+        port = 80
+      }
+      protocols {
+        type = "Https"
+        port = 443
+      }
+    }
+  }
 }