Subnets

Each VNet should contain at least one subnet, possibly more. Normally you would create the subnets inside the vnet resource but alternatively you can create them separately as well. Create a subnet with the code below:

resource "azurerm_subnet" "hub-subnet2" {
  name                 = "subnet2"
  resource_group_name  = azurerm_resource_group.rg.name
  virtual_network_name = azurerm_virtual_network.vnet-hub.name
  address_prefixes     = ["10.0.1.0/24"]
  depends_on = [
    azurerm_virtual_network.vnet-hub
  ]
}

In the code below, you will notice:

Subnets with delegation

In Azure, sometimes it is required to create subnets with a specific delegation. Some resources require a subnet to be delegated for only that type of resource. The example below shows how to create a subnet delegated to SQL Managed Instances. 

resource "azurerm_subnet" "hub-sql-subnet" {
  name                 = "SQLSubnet"
  resource_group_name  = azurerm_resource_group.rg.name
  virtual_network_name = azurerm_virtual_network.vnet-hub.name
  address_prefixes     = ["10.0.2.0/24"]
  
  delegation {
    name = "Microsoft.Sql/managedInstances"
    service_delegation {
      name = "Microsoft.Sql/managedInstances"
    }
  }

  depends_on = [
    azurerm_virtual_network.vnet-hub
  ]
}

Valid list of delegations

Microsoft.Network/fpgaNetworkInterfaces
Microsoft.Web/serverFarms
Microsoft.ContainerInstance/containerGroups
Microsoft.Netapp/volumes
Microsoft.HardwareSecurityModules/dedicatedHSMs
Microsoft.ServiceFabricMesh/networks
Microsoft.Logic/integrationServiceEnvironments
Microsoft.Batch/batchAccounts
Microsoft.Sql/managedInstances
Microsoft.Sql/managedInstancesOnebox
Microsoft.Sql/managedInstancesTest
Microsoft.Sql/managedInstancesStage
Microsoft.Web/hostingEnvironments
Microsoft.BareMetal/CrayServers
Microsoft.BareMetal/MonitoringServers
Microsoft.Databricks/workspaces
Microsoft.BareMetal/AzureHostedService
Microsoft.BareMetal/AzureVMware
Microsoft.BareMetal/AzureHPC
Microsoft.BareMetal/AzurePaymentHSM
Microsoft.StreamAnalytics/streamingJobs
Microsoft.DBforPostgreSQL/serversv2
Microsoft.AzureCosmosDB/clusters
Microsoft.MachineLearningServices/workspaces
Microsoft.DBforPostgreSQL/singleServers
Microsoft.DBforPostgreSQL/flexibleServers
Microsoft.DBforMySQL/serversv2
Microsoft.DBforMySQL/flexibleServers
Microsoft.DBforMySQL/servers
Microsoft.ApiManagement/service
Microsoft.Synapse/workspaces
Microsoft.PowerPlatform/vnetaccesslinks
Microsoft.Network/dnsResolvers
Microsoft.Kusto/clusters
Microsoft.DelegatedNetwork/controller
Microsoft.ContainerService/managedClusters
Microsoft.PowerPlatform/enterprisePolicies
Microsoft.Network/virtualNetworkGateways
Microsoft.StoragePool/diskPools
Microsoft.DocumentDB/cassandraClusters
Microsoft.Apollo/npu
Microsoft.AVS/PrivateClouds
Microsoft.Orbital/orbitalGateways
Microsoft.Singularity/accounts/networks
Microsoft.Singularity/accounts/npu
Microsoft.ContainerService/TestClients
Microsoft.LabServices/labplans
Microsoft.Fidalgo/networkSettings
Microsoft.DevCenter/networkConnection
NGINX.NGINXPLUS/nginxDeployments
Microsoft.DevOpsInfrastructure/pools
Microsoft.CloudTest/pools
Microsoft.CloudTest/hostedpools
Microsoft.CloudTest/images
PaloAltoNetworks.Cloudngfw/firewalls
Qumulo.Storage/fileSystems
Microsoft.App/testClients
Microsoft.App/environments
Microsoft.ServiceNetworking/trafficControllers
GitHub.Network/networkSettings
Microsoft.Network/networkWatchers
Dell.Storage/fileSystems
Microsoft.Netapp/scaleVolumes
Oracle.Database/networkAttachments
Microsoft.SubnetDelegator/msfttestclients
Microsoft.SubnetDelegator/ametestclients
Microsoft.InternalVnetInjection/TestAppId
PureStorage.Block/storagePools
Informatica.DataManagement/organizations
Microsoft.AzureCommunicationsGateway/networkSettings
Microsoft.PowerAutomate/hostedRpa
Microsoft.MachineLearningServices/workspaceComputes