VNET Using External DNS Addresses

Description

Code Example

resource "azurerm_virtual_network" "example" {
  name                = "example-network"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name

  address_space       = ["10.0.0.0/16"]
  
  # ... other configurations ...

+ dns_servers = ["10.0.0.5"]  // Ensure DNS servers are within the VNET's address space
}

Remediation

Terraform

Resource:

• azurerm_virtual_network

Arguments:

• dns_servers
• address_space

Rule Details

Field	Value
ID	IAC-0690
Severity	MEDIUM
IaC Type	arm
Frameworks	Terraform,
Checkov ID	CKV_AZURE_183

References

• Checkov Rule

---