Table of Contents

1. Challenge

   Create an Application VNet using the VNet module

   In this objective, you will create an application virtual network using the VNet module and the resource group provided by the lab. The network should use the 10.42.0.0/16 address space, and the web and app subnets should both use 24-bit subnets from that address space.

   1. Log into the Azure CLI using the lab credentials
   2. Retrieve the name of the resource group used for this lab:

   az group list --query [].name
   

   3. Create a Terraform configuration using the azurerm provider: provider.tf

   provider "azurerm" {
     features {}
     skip_provider_registration = true
   }
   

   4. Configure the lab provided resource group as a data source: main.tf

   data "azurerm_resource_group" "main" {
     name = var.resource_group_name
   }
   

   5. Use the VNet module to create a virtual network with two subnets. Create and add additional input variables and Terraform files as needed.
   6. Deploy the virtual network to Azure using Terraform
2. Challenge

   Peer the Application VNet with the shared VNet

   In this objective, you will peer the application virtual network you created in the previous objective with the existing Hub virtual network generated by the lab. The peering should not provide gateway transit or forwarded traffic.

   1. Retrieve the name of the Hub virtual network:

   az network vnet list --query [].name
   

   2. Add a azurerm_virtual_network data source to your configuration
   3. Create azurerm_virtual_network_peering resources for each direction of the peering connection
   4. Apply the updated configuration to your environment
3. Challenge

   Confirm traffic flow between VNets

   1. Check on the peering connections from the command line:

   az network vnet peering list --resource-group RESOURCE_GROUP_NAME --vnet-name HUB_VNET_NAME
   az network vnet peering list --resource-group RESOURCE_GROUP_NAME --vnet-name APP_VNET_NAME
   

   2. Log into the Azure portal and visually confirm peering connectivity