Investigating how network is configured in aws and azure

[youssefbouraoui1]

1. Identify the VPCs (Virtual Private Clouds)

List all VPCs in the account/region.

Check:

VPC ID, name, CIDR block (IP range)

DNS settings (DNS resolution, DNS hostnames)

Determine which VPCs are public, private, or hybrid.

See How it is declared in aws (Ismail) and azure (Ayoub).

List all the dependant Services on the network (like subnets...) in both aws and azure.

[Ayoech]

Azure Networking Services with Terraform

This project demonstrates how to provision Azure networking services using Terraform, including Resource Group, Virtual Network, Subnets, Network Security Group, Public IP, Network Interface, and optionally a Linux Virtual Machine.

Step 1: Initialize Terraform

terraform init

Step 2: Create Resource Group

resource "azurerm_resource_group" "rg" {
  name     = "rg-network-demo"
  location = "East US"
}

Step 3: Create Virtual Network (VNet)

resource "azurerm_virtual_network" "vnet" {
  name                = "demo-vnet"
  address_space       = ["10.0.0.0/16"]
  location            = azurerm_resource_group.rg.location
  resource_group_name = azurerm_resource_group.rg.name
}

Step 4: Create Subnets

resource "azurerm_subnet" "subnet1" {
  name                 = "subnet1"
  resource_group_name  = azurerm_resource_group.rg.name
  virtual_network_name = azurerm_virtual_network.vnet.name
  address_prefixes     = ["10.0.1.0/24"]
}

resource "azurerm_subnet" "subnet2" {
  name                 = "subnet2"
  resource_group_name  = azurerm_resource_group.rg.name
  virtual_network_name = azurerm_virtual_network.vnet.name
  address_prefixes     = ["10.0.2.0/24"]
}

Step 5: Create Network Security Group (NSG)

resource "azurerm_network_security_group" "nsg" {
  name                = "demo-nsg"
  location            = azurerm_resource_group.rg.location
  resource_group_name = azurerm_resource_group.rg.name

  security_rule {
    name                       = "AllowSSH"
    priority                   = 1001
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "22"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }
}

Step 6: Associate NSG with Subnet

resource "azurerm_subnet_network_security_group_association" "subnet1_nsg" {
  subnet_id                 = azurerm_subnet.subnet1.id
  network_security_group_id = azurerm_network_security_group.nsg.id
}

Step 7: Create Public IP

resource "azurerm_public_ip" "pubip" {
  name                = "demo-publicip"
  location            = azurerm_resource_group.rg.location
  resource_group_name = azurerm_resource_group.rg.name
  allocation_method   = "Static"
  sku                 = "Standard"
}

Step 8: Create Network Interface (NIC)

resource "azurerm_network_interface" "nic" {
  name                = "demo-nic"
  location            = azurerm_resource_group.rg.location
  resource_group_name = azurerm_resource_group.rg.name

  ip_configuration {
    name                          = "internal"
    subnet_id                     = azurerm_subnet.subnet1.id
    private_ip_address_allocation = "Dynamic"
    public_ip_address_id          = azurerm_public_ip.pubip.id
  }
}

Step 9: (Optional) Deploy a Linux Virtual Machine

resource "azurerm_linux_virtual_machine" "vm" {
  name                = "demo-vm"
  resource_group_name = azurerm_resource_group.rg.name
  location            = azurerm_resource_group.rg.location
  size                = "Standard_B1s"
  admin_username      = "azureuser"
  network_interface_ids = [
    azurerm_network_interface.nic.id
  ]
  admin_ssh_key {
    username   = "azureuser"
    public_key = file("~/.ssh/id_rsa.pub")
  }
  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
  }
  source_image_reference {
    publisher = "Canonical"
    offer     = "UbuntuServer"
    sku       = "20_04-lts"
    version   = "latest"
  }
}

Step 10: Apply Terraform Configuration

terraform plan
terraform apply

Type yes when prompted.

Step 11: Destroy Resources (Cleanup)

terraform destroy

Type yes when prompted.

[youssefbouraoui1]

provider: aws
region: east-us

network:
name: myVPC
cidr: 10.0.0.0/16

subnets:

• name: public
  cidr: 10.0.1.0/24
  isPublic: true
  securityGroup: sg-public # attach automatically to VM in AWS, subnet in Azure

vms:

• name: webserver
  subnet: public
  type: medium
  securityGroup: sg-public