Skip to content

patch (iac): [secure-hybrid-network] batch code quality fixes#264

Open
ferantivero wants to merge 6 commits into
feature/421252_add-validation-stepsfrom
patch/421252_batch-fixes
Open

patch (iac): [secure-hybrid-network] batch code quality fixes#264
ferantivero wants to merge 6 commits into
feature/421252_add-validation-stepsfrom
patch/421252_batch-fixes

Conversation

@ferantivero
Copy link
Copy Markdown
Contributor

Why

A handful of code quality improvements to align the template with current Bicep best practices and address a hardcoded shared key.

What

  • Fix typo fontendName → frontendName
  • Replace hardcoded VPN shared key '123secret' with @secure() parameter
  • Fix legacy diagnostic settings API pattern (use scope property)
  • Replace hardcoded reference() calls with Bicep symbolic property access
  • Add defaultOutboundAccess: false to Bastion subnets
  • Update README parameter documentation

Test

  • Bicep compiles without errors
  • No breaking changes to deployment flow

ferantivero and others added 6 commits May 18, 2026 10:27
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The VPN connection shared key was hardcoded as '123secret' in both
local gateway templates. Now passed as a @secure() parameter from
the main deployment template.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Replace the deprecated /providers/ segment pattern with the proper
scope property for the spoke NSG diagnostic settings resource.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Use azureFirewallResource.properties.ipConfigurations[0] instead of
the legacy reference(id, apiVersion) pattern for route next-hop IP.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Disable default outbound internet access on the Bastion subnets
in both azure-network and mock-onprem templates, consistent with
other subnets in this deployment.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Fix incorrect 'Azure SQL instance' descriptions (these are VMs),
add new sharedKey parameter, fix descriptions and defaults to
match current template state.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant