part2_connect_inbound.json

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "metadata": {
        "comments": "This template is released under an as-is, best effort, and is community supported.",
        "author": "Matt McLimans (mmclimans@paloaltonetworks.com)"
    },
    "parameters": {
        "WANResourceGroup": {
            "type": "string",
            "defaultValue": "virtual-wan-rg",
            "metadata": {
                "description": "Name of the vWAN resource group."
            }
        },
        "securityVnetName": {
            "type": "string",
            "metadata": {
                "description": "Name of the existing security vNet to connect to the hub."
            }
        },
        "HubName": {
            "type": "string",
            "defaultValue": "hub1",
            "metadata": {
                "description": "Name of an existing vWAN hub."
            }
        },
        "HubAssociatedRouteTable": {
            "type": "string",
            "defaultValue": "defaultRouteTable",
            "metadata": {
                "description": "The existing vWAN hub route table to associate with the VNET connection."
            }
        },
        "HubPropagatedRouteTable": {
            "type": "String",
            "defaultValue": "defaultRouteTable",
            "metadata": {
                "description": "The existing vWAN hub route table to propagate the VNET connection."
            }
        }
    },
    "variables": {
        "global_apiVersion": "2020-06-01",
        "global_resource_group": "[resourceGroup().name]",
        "vnet_name": "[parameters('securityVnetName')]",

        "wan_rg": "[parameters('WANResourceGroup')]",
        "hub_name": "[parameters('HubName')]",
        "hub_connection_name": "[concat(variables('vnet_name'),'-conn')]",
        "hub_route_table_associated": "[resourceId(variables('wan_rg'),'Microsoft.Network/virtualHubs/hubRouteTables', parameters('HubName'), parameters('HubAssociatedRouteTable'))]",
        "hub_route_table_propagated": "[resourceId(variables('wan_rg'),'Microsoft.Network/virtualHubs/hubRouteTables', parameters('HubName'), parameters('HubPropagatedRouteTable'))]"

    },
    "resources": [
        {
            "apiVersion": "[variables('global_apiVersion')]",
            "type": "Microsoft.Resources/deployments",
            "resourceGroup": "[variables('wan_rg')]",
            "name": "CREATE_HUB_CONNECTION",
            "dependsOn": [],
            "properties": {
                "mode": "Incremental",
                "parameters": {},
                "template": {
                    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
                    "contentVersion": "1.0.0.0",
                    "parameters": {},
                    "variables": {},
                    "resources": [
                        {
                            "type": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections",
                            "apiVersion": "[variables('global_apiVersion')]",
                            "name": "[concat(variables('hub_name'), '/', variables('hub_connection_name'))]",
                            "dependsOn": [],
                            "properties": {
                                "routingConfiguration": {
                                    "associatedRouteTable": {
                                        "id": "[variables('hub_route_table_associated')]"
                                    },
                                    "propagatedRouteTables": {
                                        "labels": [],
                                        "ids": [
                                            {
                                                "id": "[variables('hub_route_table_propagated')]"
                                            }
                                        ]
                                    },
                                    "vnetRoutes": {
                                        "staticRoutes": []
                                    }
                                },
                                "remoteVirtualNetwork": {
                                    "id": "[resourceId(variables('global_resource_group'), 'Microsoft.Network/virtualNetworks', variables('vnet_name'))]"
                                },
                                "allowHubToRemoteVnetTransit": true,
                                "allowRemoteVnetToUseHubVnetGateways": true,
                                "enableInternetSecurity": true
                            }
                        }
                    ]
                }
            }
        }
    ]
}