One issue on the azurerm provider could get interesting for tflint:
azurerm_firewall_policy_rule_collection_group / application_rule_collection lets you create an application rule with FQDNs as tags. - hashicorp/terraform-provider-azurerm#29512
Hopefully i will find some time the next days to work on it :)