Disable SNAT regardless of the destination IP address (Firewall) since forced tunneling is turned on

src/modules/firewall/main.tf

@@ -29,6 +29,7 @@ resource "azurerm_firewall" "firewall" {
   location            = data.azurerm_resource_group.hub.location
   resource_group_name = data.azurerm_resource_group.hub.name
   sku_tier            = var.firewall_sku
+  private_ip_ranges   = var.firewall_disable_snat
   tags                = var.tags
 
   ip_configuration {

src/modules/firewall/variables.tf

@@ -49,3 +49,9 @@ variable "tags" {
   type        = map(string)
   default     = {}
 }
+
+variable "firewall_disable_snat" {
+  description = "The address space to be used to ensure that SNAT is disabled."
+  default     = ["0.0.0.0/0"]
+  type        = list
+}