Skip to content

Commit 332a985

Browse files
Resolved DKM SFI issues
1 parent 4fdbe3f commit 332a985

2 files changed

Lines changed: 20 additions & 9 deletions

File tree

infra/main.bicep

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -699,7 +699,7 @@ module avmStorageAccount 'br/public:avm/res/storage/storage-account:0.32.0' = {
699699
}
700700
allowBlobPublicAccess: enablePrivateNetworking ? true : false
701701
publicNetworkAccess: enablePrivateNetworking ? 'Disabled' : 'Enabled'
702-
702+
requireInfrastructureEncryption: true
703703
privateEndpoints: enablePrivateNetworking
704704
? [
705705
{
@@ -822,6 +822,7 @@ module avmOpenAi 'br/public:avm/res/cognitive-services/account:0.14.2' = {
822822
tags: tags
823823
enableTelemetry: enableTelemetry
824824
customSubDomainName: openAiAccountName
825+
disableLocalAuth: true
825826
managedIdentities: {
826827
systemAssigned: true
827828
}
@@ -897,6 +898,7 @@ module documentIntelligence 'br/public:avm/res/cognitive-services/account:0.14.2
897898
tags: tags
898899
sku: 'S0'
899900
customSubDomainName: docIntelAccountName
901+
disableLocalAuth: true
900902
managedIdentities: {
901903
systemAssigned: true
902904
}

infra/main.json

Lines changed: 17 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@
55
"metadata": {
66
"_generator": {
77
"name": "bicep",
8-
"version": "0.43.1.21952",
9-
"templateHash": "16210311400744160873"
8+
"version": "0.43.8.12551",
9+
"templateHash": "6450034536549346009"
1010
}
1111
},
1212
"parameters": {
@@ -6883,8 +6883,8 @@
68836883
"metadata": {
68846884
"_generator": {
68856885
"name": "bicep",
6886-
"version": "0.43.1.21952",
6887-
"templateHash": "10615902090169258577"
6886+
"version": "0.43.8.12551",
6887+
"templateHash": "14509138889694036561"
68886888
}
68896889
},
68906890
"definitions": {
@@ -21078,8 +21078,8 @@
2107821078
"metadata": {
2107921079
"_generator": {
2108021080
"name": "bicep",
21081-
"version": "0.43.1.21952",
21082-
"templateHash": "2328998422553242639"
21081+
"version": "0.43.8.12551",
21082+
"templateHash": "2224548258804916323"
2108321083
},
2108421084
"name": "Container Registry Module"
2108521085
},
@@ -35692,6 +35692,9 @@
3569235692
},
3569335693
"allowBlobPublicAccess": "[if(parameters('enablePrivateNetworking'), createObject('value', true()), createObject('value', false()))]",
3569435694
"publicNetworkAccess": "[if(parameters('enablePrivateNetworking'), createObject('value', 'Disabled'), createObject('value', 'Enabled'))]",
35695+
"requireInfrastructureEncryption": {
35696+
"value": true
35697+
},
3569535698
"privateEndpoints": "[if(parameters('enablePrivateNetworking'), createObject('value', createArray(createObject('name', format('pep-blob-{0}', variables('solutionSuffix')), 'privateDnsZoneGroup', createObject('privateDnsZoneGroupConfigs', createArray(createObject('name', 'storage-dns-zone-group-blob', 'privateDnsZoneResourceId', reference(format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageBlob)).outputs.resourceId.value))), 'subnetResourceId', reference('virtualNetwork').outputs.pepsSubnetResourceId.value, 'service', 'blob'), createObject('name', format('pep-queue-{0}', variables('solutionSuffix')), 'privateDnsZoneGroup', createObject('privateDnsZoneGroupConfigs', createArray(createObject('name', 'storage-dns-zone-group-queue', 'privateDnsZoneResourceId', reference(format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageQueue)).outputs.resourceId.value))), 'subnetResourceId', reference('virtualNetwork').outputs.pepsSubnetResourceId.value, 'service', 'queue'))), createObject('value', createArray()))]",
3569635699
"blobServices": {
3569735700
"value": {
@@ -43814,8 +43817,8 @@
4381443817
}
4381543818
},
4381643819
"dependsOn": [
43817-
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageBlob)]",
4381843820
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageQueue)]",
43821+
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageBlob)]",
4381943822
"userAssignedIdentity",
4382043823
"virtualNetwork"
4382143824
]
@@ -45948,6 +45951,9 @@
4594845951
"customSubDomainName": {
4594945952
"value": "[variables('openAiAccountName')]"
4595045953
},
45954+
"disableLocalAuth": {
45955+
"value": true
45956+
},
4595145957
"managedIdentities": {
4595245958
"value": {
4595345959
"systemAssigned": true
@@ -49105,8 +49111,8 @@
4910549111
},
4910649112
"dependsOn": [
4910749113
"avmOpenAi",
49108-
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').openAI)]",
4910949114
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').cognitiveServices)]",
49115+
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').openAI)]",
4911049116
"virtualNetwork"
4911149117
]
4911249118
},
@@ -49138,6 +49144,9 @@
4913849144
"customSubDomainName": {
4913949145
"value": "[variables('docIntelAccountName')]"
4914049146
},
49147+
"disableLocalAuth": {
49148+
"value": true
49149+
},
4914149150
"managedIdentities": {
4914249151
"value": {
4914349152
"systemAssigned": true

0 commit comments

Comments
 (0)