diff --git a/plugins/modules/azure_rm_ddosprotectionplan.py b/plugins/modules/azure_rm_ddosprotectionplan.py
new file mode 100644
index 000000000..0c78aef70
--- /dev/null
+++ b/plugins/modules/azure_rm_ddosprotectionplan.py
@@ -0,0 +1,242 @@
+#!/usr/bin/python
+#
+# Copyright (c) 2021 Praveen Ghuge (@praveenghuge), Karl Dasan (@ikarldasan)
+#
+# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
+from __future__ import absolute_import, division, print_function
+__metaclass__ = type
+DOCUMENTATION = '''
+---
+module: azure_rm_ddosprotectionplan
+version_added: "1.7.0"
+short_description: Manage DDoS protection plan
+description:
+    - Create, update and delete instance of DDoS protection plan.
+options:
+    resource_group:
+        description:
+            - Name of the resource group to which the resource belongs.
+        required: true
+        type: str
+    name:
+        description:
+            - Unique name of the app service plan to create or update.
+        required: true
+        type: str
+    location:
+        description:
+            - Resource location. If not set, location from the resource group will be used as default.
+        type: str
+    state:
+      description:
+          - Assert the state of the DDoS protection plan.
+          - Use C(present) to create or update an DDoS protection plan and C(absent) to delete it.
+      type: str
+      default: present
+      choices:
+          - absent
+          - present
+    log_path:
+        description:
+            - parent argument.
+        type: str
+    log_mode:
+        description:
+            - parent argument.
+        type: str
+extends_documentation_fragment:
+   - azure.azcollection.azure
+   - azure.azcollection.azure_tags
+author:
+    - Praveen Ghuge (@praveenghuge)
+    - Karl Dasan (@ikarldasan)
+'''
+EXAMPLES = '''
+- name: "Create DDoS protection plan"
+  azure_rm_ddosprotectionplan:
+    resource_group: rg
+    location: eastus
+    name: ddosplan
+- name: Delete DDoS protection plan
+  azure_rm_ddosprotectionplan:
+    resource_group: rg
+    name: ddosplan
+    state: absent
+'''
+
+RETURN = '''
+state:
+    description:
+        - Current state of the DDoS protection plan.
+    returned: always
+    type: dict
+    sample: {
+        "id": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroup/myResourceGroup/providers/Microsoft.Network/ddosProtectionPlans/ddosplan",
+        "location": "eastus",
+        "name": "ddosplan",
+        "etag": "W/60ac0480-44dd-4881-a2ed-680d20b3978e",
+        "provisioning_state": "Succeeded",
+        "resource_guid": null,
+        "type": "Microsoft.Network/ddosProtectionPlans",
+        "tags": {"a": "b"},
+        "virtual_networks": []
+    }
+'''
+
+from ansible_collections.azure.azcollection.plugins.module_utils.azure_rm_common import AzureRMModuleBase
+
+try:
+    from msrestazure.azure_exceptions import CloudError
+    from azure.mgmt.network import NetworkManagementClient
+except ImportError:
+    # This is handled in azure_rm_common
+    pass
+
+
+class AzureDDoSProtectionPlan(AzureRMModuleBase):
+
+    def __init__(self):
+        # define user inputs from playbook
+
+        self.module_arg_spec = dict(
+            resource_group=dict(type='str', required=True),
+            name=dict(type='str', required=True),
+            location=dict(type='str'),
+            state=dict(choices=['present', 'absent'],
+                       default='present', type='str'),
+        )
+
+        self.resource_group = None
+        self.name = None
+        self.location = None
+        self.state = None
+        self.tags = None
+        self.log_path = None
+        self.results = dict(
+            changed=False,
+            state=dict()
+        )
+
+        super(AzureDDoSProtectionPlan, self).__init__(self.module_arg_spec,
+                                                      supports_check_mode=True,
+                                                      supports_tags=True)
+
+    def exec_module(self, **kwargs):
+
+        for key in list(self.module_arg_spec.keys()) + ['tags']:
+            setattr(self, key, kwargs[key])
+
+        self.results['check_mode'] = self.check_mode
+
+        # retrieve resource group to make sure it exists
+        self.get_resource_group(self.resource_group)
+
+        results = dict()
+        changed = False
+
+        try:
+            self.log('Fetching DDoS protection plan {0}'.format(self.name))
+            ddos_protection_plan = self.network_client.ddos_protection_plans.get(
+                self.resource_group, self.name)
+
+            results = ddos_protection_plan_to_dict(ddos_protection_plan)
+
+            # don't change anything if creating an existing zone, but change if deleting it
+            if self.state == 'present':
+                changed = False
+
+                update_tags, results['tags'] = self.update_tags(
+                    results['tags'])
+                if update_tags:
+                    changed = True
+
+            elif self.state == 'absent':
+                changed = True
+
+        except CloudError:
+            # the DDoS protection plan does not exist so create it
+            if self.state == 'present':
+                changed = True
+            else:
+                # you can't delete what is not there
+                changed = False
+
+        self.results['changed'] = changed
+        self.results['state'] = results
+
+        # return the results if you are only gathering information
+        if self.check_mode:
+            return self.results
+
+        if changed:
+            if self.state == "present":
+                self.results['state'] = self.create_or_update_ddos_protection_plan(
+                    self.module.params)
+            elif self.state == "absent":
+                # delete DDoS protection plan
+                self.delete_ddos_protection_plan()
+                self.results['state']['status'] = 'Deleted'
+
+        return self.results
+
+    def create_or_update_ddos_protection_plan(self, params):
+        '''
+        Create or update DDoS protection plan.
+        :return: create or update DDoS protection plan instance state dictionary
+        '''
+        self.log("create or update DDoS protection plan {0}".format(self.name))
+        try:
+            poller = self.network_client.ddos_protection_plans.create_or_update(
+                resource_group_name=params.get("resource_group"),
+                location=self.location,
+                ddos_protection_plan_name=params.get("name"),
+                tags=self.tags)
+            result = self.get_poller_result(poller)
+            self.log("Response : {0}".format(result))
+        except CloudError as ex:
+            self.fail("Failed to create DDoS protection plan {0} in resource group {1}: {2}".format(
+                self.name, self.resource_group, str(ex)))
+        return ddos_protection_plan_to_dict(result)
+
+    def delete_ddos_protection_plan(self):
+        '''
+        Deletes specified DDoS protection plan
+        :return True
+        '''
+        self.log("Deleting the DDoS protection plan {0}".format(self.name))
+        try:
+            poller = self.network_client.ddos_protection_plans.delete(
+                self.resource_group, self.name)
+            result = self.get_poller_result(poller)
+        except CloudError as e:
+            self.log('Error attempting to delete DDoS protection plan.')
+            self.fail(
+                "Error deleting the DDoS protection plan : {0}".format(str(e)))
+        return result
+
+
+def ddos_protection_plan_to_dict(item):
+    # turn DDoS protection plan object into a dictionary (serialization)
+    ddos_protection_plan = item.as_dict()
+
+    result = dict(
+        additional_properties=ddos_protection_plan.get('additional_properties', None),
+        id=ddos_protection_plan.get('id', None),
+        name=ddos_protection_plan.get('name', None),
+        type=ddos_protection_plan.get('type', None),
+        location=ddos_protection_plan.get('location', None),
+        tags=ddos_protection_plan.get('tags', None),
+        etag=ddos_protection_plan.get('etag', None),
+        resource_guid=ddos_protection_plan.get('resource_guid', None),
+        provisioning_state=ddos_protection_plan.get('provisioning_state', None),
+        virtual_networks=ddos_protection_plan.get('virtual_networks', None)
+    )
+    return result
+
+
+def main():
+    AzureDDoSProtectionPlan()
+
+
+if __name__ == '__main__':
+    main()
diff --git a/plugins/modules/azure_rm_ddosprotectionplan_info.py b/plugins/modules/azure_rm_ddosprotectionplan_info.py
new file mode 100644
index 000000000..489c99be7
--- /dev/null
+++ b/plugins/modules/azure_rm_ddosprotectionplan_info.py
@@ -0,0 +1,164 @@
+#!/usr/bin/python
+#
+# Copyright (c) 2021 Praveen Ghuge (@praveenghuge), Karl Dasan (@ikarldasan)
+#
+# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
+
+from __future__ import absolute_import, division, print_function
+
+__metaclass__ = type
+
+
+DOCUMENTATION = '''
+---
+module: azure_rm_ddosprotectionplan_info
+version_added: "1.7.0"
+short_description: Get Azure DDoS protection plan
+description:
+    - Get facts of Azure DDoS protection plan.
+options:
+    resource_group:
+        description:
+            - The name of the resource group.
+        type: str
+    name:
+        description:
+            - The name of the DDoS protection plan.
+        type: str
+extends_documentation_fragment:
+- azure.azcollection.azure
+author:
+    - Praveen Ghuge (@praveenghuge)
+    - Karl Dasan (@ikarldasan)
+'''
+
+
+EXAMPLES = '''
+  - name: Get facts of specific DDoS protection plan
+    azure_rm_ddosprotectionplan_info:
+      resource_group: myResourceGroup
+      name: myDDoSProtectionPlan
+'''
+
+RETURN = '''
+'''
+
+from ansible_collections.azure.azcollection.plugins.module_utils.azure_rm_common import AzureRMModuleBase
+
+try:
+    from msrestazure.azure_exceptions import CloudError
+    from azure.mgmt.network import NetworkManagementClient
+    from msrest.serialization import Model
+except ImportError:
+    # This is handled in azure_rm_common
+    pass
+
+
+class AzureDDoSProtectionPlanInfo(AzureRMModuleBase):
+    def __init__(self):
+        self.module_arg_spec = dict(
+            resource_group=dict(
+                type='str'
+            ),
+            name=dict(
+                type='str'
+            )
+        )
+        # store the results of the module operation
+        self.results = dict(
+            changed=False)
+        self.resource_group = None
+        self.name = None
+        self.tags = None
+
+        super(AzureDDoSProtectionPlanInfo, self).__init__(
+            self.module_arg_spec, supports_tags=False)
+
+    def exec_module(self, **kwargs):
+
+        for key in self.module_arg_spec:
+            setattr(self, key, kwargs[key])
+
+        if self.name is not None:
+            results = self.get()
+        elif self.resource_group:
+            # all the DDoS protection plan listed in that specific resource group
+            results = self.list_resource_group()
+        else:
+            # all the DDoS protection plan listed in the subscription
+            results = self.list_subscription()
+
+        self.results['ddosprotectionplan'] = [
+            self.ddos_protection_plan_to_dict(x) for x in results]
+        return self.results
+
+    def get(self):
+        response = None
+        results = []
+        try:
+            response = self.network_client.ddos_protection_plans.get(
+                self.resource_group, self.name)
+            self.log("Response : {0}".format(response))
+        except CloudError as e:
+            self.fail('Could not get info for DDoS protection plan. {0}'.format(str(e)))
+
+        if response and self.has_tags(response.tags, self.tags):
+            results = [response]
+        return results
+
+    def list_resource_group(self):
+        self.log('List items for resource group')
+        try:
+            response = self.network_client.ddos_protection_plans.list_by_resource_group(
+                self.resource_group)
+
+        except CloudError as exc:
+            self.fail(
+                "Failed to list for resource group {0} - {1}".format(self.resource_group, str(exc)))
+
+        results = []
+        for item in response:
+            if self.has_tags(item.tags, self.tags):
+                results.append(item)
+        return results
+
+    def list_subscription(self):
+        self.log('List items for subscription')
+        try:
+            response = self.network_client.ddos_protection_plans.list()
+
+        except CloudError as exc:
+            self.fail(
+                "Failed to list DDoS protection plan in the subscription - {0}".format(str(exc)))
+
+        results = []
+        for item in response:
+            if self.has_tags(item.tags, self.tags):
+                results.append(item)
+        return results
+
+    def ddos_protection_plan_to_dict(self, item):
+        # turn DDoS protection plan object into a dictionary (serialization)
+        ddos_protection_plan = item.as_dict()
+
+        result = dict(
+            additional_properties=ddos_protection_plan.get('additional_properties', None),
+            id=ddos_protection_plan.get('id', None),
+            name=ddos_protection_plan.get('name', None),
+            type=ddos_protection_plan.get('type', None),
+            location=ddos_protection_plan.get('location', None),
+            tags=ddos_protection_plan.get('tags', None),
+            etag=ddos_protection_plan.get('etag', None),
+            resource_guid=ddos_protection_plan.get('resource_guid', None),
+            provisioning_state=ddos_protection_plan.get('provisioning_state', None),
+            virtual_networks=ddos_protection_plan.get('virtual_networks', None)
+        )
+        return result
+
+
+def main():
+    AzureDDoSProtectionPlanInfo()
+
+
+if __name__ == '__main__':
+    main()
diff --git a/pr-pipelines.yml b/pr-pipelines.yml
index 5bb9a7ac3..4601377fe 100644
--- a/pr-pipelines.yml
+++ b/pr-pipelines.yml
@@ -43,6 +43,7 @@ parameters:
     - "azure_rm_containerregistry"
     - "azure_rm_cosmosdbaccount"
     - "azure_rm_datalakestore"
+    - "azure_rm_ddosprotectionplan"
     - "azure_rm_deployment"
     - "azure_rm_dnsrecordset"
     - "azure_rm_dnszone"
diff --git a/tests/integration/targets/azure_rm_ddosprotectionplan/aliases b/tests/integration/targets/azure_rm_ddosprotectionplan/aliases
new file mode 100644
index 000000000..5cf25760d
--- /dev/null
+++ b/tests/integration/targets/azure_rm_ddosprotectionplan/aliases
@@ -0,0 +1,3 @@
+cloud/azure
+shippable/azure/group10
+destructive
\ No newline at end of file
diff --git a/tests/integration/targets/azure_rm_ddosprotectionplan/meta/main.yml b/tests/integration/targets/azure_rm_ddosprotectionplan/meta/main.yml
new file mode 100644
index 000000000..cf34ae763
--- /dev/null
+++ b/tests/integration/targets/azure_rm_ddosprotectionplan/meta/main.yml
@@ -0,0 +1,2 @@
+dependencies:
+    - setup_azure
\ No newline at end of file
diff --git a/tests/integration/targets/azure_rm_ddosprotectionplan/tasks/main.yml b/tests/integration/targets/azure_rm_ddosprotectionplan/tasks/main.yml
new file mode 100644
index 000000000..a61003680
--- /dev/null
+++ b/tests/integration/targets/azure_rm_ddosprotectionplan/tasks/main.yml
@@ -0,0 +1,82 @@
+- name: Create random ddos protection plan
+  set_fact:
+      ddosprotectionplan: "test{{ resource_group | hash('md5') | truncate(16, True, '') + (65535 | random | string) }}"
+
+- name: Create DDoS protection plan (check mode)
+  azure_rm_ddosprotectionplan:
+    location: eastus2
+    name: "{{ ddosprotectionplan }}"
+    resource_group: "{{ resource_group }}"
+  check_mode: yes
+  register: results
+
+- assert:
+    that: results.changed
+
+- name: Create DDoS protection plan
+  azure_rm_ddosprotectionplan:
+    location: eastus2
+    name: "{{ ddosprotectionplan }}"
+    resource_group: "{{ resource_group }}"
+  register: results
+
+- assert:
+    that: results.changed
+
+- name: Update DDoS protection plan
+  azure_rm_ddosprotectionplan:
+    location: eastus2
+    name: "{{ ddosprotectionplan }}"
+    resource_group: "{{ resource_group }}"
+    tags:
+      test: modified
+  register: results
+
+- assert:
+    that: 
+      - results.changed
+      - results.state.tags.test == 'modified'
+
+- name: Retrieve DDoS protection plan
+  azure_rm_ddosprotectionplan_info:
+    name: "{{ ddosprotectionplan }}"
+    resource_group: "{{ resource_group }}"
+  register: results
+
+- name: Assert that facts module returned result
+  assert:
+    that: 
+      - results.ddosprotectionplan[0].tags.test == 'modified'
+
+- name: Test idempotent
+  azure_rm_ddosprotectionplan:
+    location: eastus2
+    name: "{{ ddosprotectionplan }}"
+    resource_group: "{{ resource_group }}"
+  register: results
+
+- assert:
+    that:
+      - not results.changed
+
+#
+# azure_rm_ddosprotectionplan cleanup
+#
+
+- name: Delete DDoS protection plan
+  azure_rm_ddosprotectionplan:
+    location: eastus2
+    name: "{{ ddosprotectionplan }}"
+    resource_group: "{{ resource_group }}"
+    state: absent
+
+- name: Delete DDoS protection plan
+  azure_rm_ddosprotectionplan:
+    location: eastus2
+    name: "{{ ddosprotectionplan }}"
+    resource_group: "{{ resource_group }}"
+    state: absent
+  register: results
+
+- assert:
+    that: not results.changed