Building Azure VPN with Terraform: Zero-Trust Authentication and GitOps
I needed VPN access to Azure resources across multiple subscriptions. The requirement was simple: secure access without managing additional credentials, no PSKs floating around, and everything infrastructure-as-code. Here’s how I built it. The Problem The Azure environment spans many subscriptions with overlapping IP ranges - a legacy of growth. We had: SQL Managed Instances requiring private connectivity Public SQL databases needing IP whitelisting Development teams needing ad-hoc access Zero appetite for managing VPN credentials separately from Azure AD Traditional VPN solutions would require: ...