Automating SSL/TLS certificates with Let's Encrypt and Azure Key Vault is a solved problem. Tools like Azure Acmebothttps://github.com/shibayan/keyvault-acmebot make deployment incredibly simple. In corporate environments targeting ISO 27001, KRITIS...

You add a Route Table to force all internet-bound traffic 0.0.0.0/0 from your Spoke VNets into an Azure Firewall. You run terraform plan. Error: Cycle: azurermsubnetroutetableassociation.spokebinding, azurermroutetable.spokeudr, azurermfirewall.fw ....