# Terraform Plan Report

Generated by tfplan2md 1.10.0 (2ec7093) on 2026-02-04 18:09:07 UTC | Terraform 1.14.0

## Summary

| Action | Count | Resource Types |
| -------- | ------- | ---------------- |
| ➕ Add | 3 | 3 azurerm_firewall_application_rule_collection |
| 🔄 Change | 2 | 2 azurerm_firewall_application_rule_collection |
| ♻️ Replace | 0 |  |
| ❌ Destroy | 1 | 1 azurerm_firewall_application_rule_collection |
| **Total** | **6** | |

## Resource Changes

### 📦 Module: root

<details open style="margin-bottom:12px; border:1px solid rgb(var(--palette-neutral-10, 153, 153, 153)); padding:12px;">
<summary>➕ azurerm_firewall_application_rule_collection <b><code>app_rules_create</code></b> — <code>🆔 app-rules</code> in <code>📁 rg-firewall-demo</code></summary>
<br>

**Collection:** `app-rules` | **Priority:** `100` | **Action:** `✅ Allow`

#### Rules

| Rule Name | Protocols | Source Addresses | Source IP Groups | Target FQDNs | FQDN Tags | Description |
| ----------- | ----------- | ------------------ | ------------------ | ------------- | ----------- | ------------- |
| `🆔 allow-github` | `Https:443` | `10.0.1.0/24` |  | `github.com, *.github.io` |  | `GitHub access` |
| `🆔 allow-azure` | `Https:443` | `10.0.0.0/24` |  | `*.azure.com, *.azurewebsites.net` |  | `Azure services` |

</details>

<details open style="margin-bottom:12px; border:1px solid rgb(var(--palette-neutral-10, 153, 153, 153)); padding:12px;">
<summary>🔄 azurerm_firewall_application_rule_collection <b><code>app_rules_update</code></b> — <code>🆔 web-rules</code> in <code>📁 rg-firewall-demo</code> | 3🔧 ➕ <code>🆔 allow-github</code>, 🔄 <code>🆔 allow-microsoft</code>, ❌ <code>🆔 allow-old-site</code></summary>
<br>

**Collection:** `web-rules` | **Priority:** `200` | **Action:** `✅ Allow`

#### Rule Changes

| Change | Rule Name | Protocols | Source Addresses | Source IP Groups | Target FQDNs | FQDN Tags | Description |
| -------- | ----------- | ----------- | ------------------ | ------------------ | ------------- | ----------- | ------------- |
| ➕ | `🆔 allow-github` | `Https:443` | `10.0.1.0/24` |  | `github.com, *.github.io` |  | `GitHub access` |
| 🔄 | `🆔 allow-microsoft` | `Http:80, Https:443` | <code style="display:block; white-space:normal; padding:0; margin:0;"><span style="background-color: #fff5f5; border-left: 3px solid #d73a49; color: #24292e; display: inline-block; padding-left: 8px; margin-left: 0;">- 10.0.0.0/<span style="background-color: #ffc0c0; color: #24292e;">24</span></span><br><span style="background-color: #f0fff4; border-left: 3px solid #28a745; color: #24292e; display: inline-block; padding-left: 8px; margin-left: 0;">+ 10.0.0.0/<span style="background-color: #acf2bd; color: #24292e;">16</span></span></code> | `` | `*.microsoft.com` | `` | <code>Microsoft services</code> |
| ❌ | `🆔 allow-old-site` | `Https:443` | `10.0.2.0/24` |  | `old-site.example.com` |  | `Legacy site (removed)` |
| ⏺️ | `🆔 allow-azure` | `Https:443` | `10.0.0.0/24` |  | `*.azure.com` |  | `Azure services` |

</details>

<details open style="margin-bottom:12px; border:1px solid rgb(var(--palette-neutral-10, 153, 153, 153)); padding:12px;">
<summary>❌ azurerm_firewall_application_rule_collection <b><code>app_rules_delete</code></b> — <code>🆔 old-rules</code> in <code>📁 rg-firewall-demo</code></summary>
<br>

**Collection:** `old-rules` | **Priority:** `300` | **Action:** `⛔ Deny`

#### Rules (being deleted)

| Rule Name | Protocols | Source Addresses | Source IP Groups | Target FQDNs | FQDN Tags | Description |
| ----------- | ----------- | ------------------ | ------------------ | ------------- | ----------- | ------------- |
| `🆔 block-social` | `Https:443` | `*` |  | `*.facebook.com, *.twitter.com` |  | `Block social media` |

</details>

<details open style="margin-bottom:12px; border:1px solid rgb(var(--palette-neutral-10, 153, 153, 153)); padding:12px;">
<summary>➕ azurerm_firewall_application_rule_collection <b><code>app_rules_with_fqdn_tags</code></b> — <code>🆔 windows-update-rules</code> in <code>📁 rg-firewall-demo</code></summary>
<br>

**Collection:** `windows-update-rules` | **Priority:** `150` | **Action:** `✅ Allow`

#### Rules

| Rule Name | Protocols | Source Addresses | Source IP Groups | Target FQDNs | FQDN Tags | Description |
| ----------- | ----------- | ------------------ | ------------------ | ------------- | ----------- | ------------- |
| `🆔 allow-windows-updates` | `Http:80, Https:443` | `10.0.0.0/16` |  |  | `WindowsUpdate` | `Windows Update service` |
| `🆔 allow-app-service` | `Https:443` |  | `/subscriptions/12345/resourceGroups/rg-demo/providers/Microsoft.Network/ipGroups/app-tier` |  | `AppServiceEnvironment` | `App Service Environment dependencies` |

</details>

<details open style="margin-bottom:12px; border:1px solid rgb(var(--palette-neutral-10, 153, 153, 153)); padding:12px;">
<summary>➕ azurerm_firewall_application_rule_collection <b><code>app_rules_long_fqdn_list</code></b> — <code>🆔 cdn-rules</code> in <code>📁 rg-firewall-demo</code></summary>
<br>

**Collection:** `cdn-rules` | **Priority:** `250` | **Action:** `✅ Allow`

#### Rules

| Rule Name | Protocols | Source Addresses | Source IP Groups | Target FQDNs | FQDN Tags | Description |
| ----------- | ----------- | ------------------ | ------------------ | ------------- | ----------- | ------------- |
| `🆔 allow-cdn-endpoints` | `Https:443` | `10.0.0.0/8` |  | `cdn1.example.com, cdn2.example.com, cdn3.example.com, ... +5 more` |  | `` |

</details>

<details open style="margin-bottom:12px; border:1px solid rgb(var(--palette-neutral-10, 153, 153, 153)); padding:12px;">
<summary>🔄 azurerm_firewall_application_rule_collection <b><code>app_rules_fallback</code></b> — <code>🆔 computed-rules</code> in <code>📁 rg-firewall-demo</code> | 1🔧 priority</summary>
<br>

**Collection:** `computed-rules` | **Priority:** `200` | **Action:** `✅ Allow`

<details>
<summary>Attribute Changes</summary>

| Attribute | Before | After |
| ----------- | -------- | ------- |
| priority | 150 | 200 |

</details>

</details>