Agents/setup/allowed regions (#208)

* Allowed region

* Allowed region with policy

* Allowed region with policy

* Allowed region with policy

* Allowed region, revert policy

* Allowed region

* Update Readme

* Nit space

Author: dharakumarmsft

scenarios/Agents/setup/network-secured-agent/README.md

@@ -218,4 +218,4 @@ Storage: privatelink.blob.core.windows.net
 - [RBAC Documentation](https://learn.microsoft.com/en-us/azure/role-based-access-control/)
 - [Network Security Best Practices](https://learn.microsoft.com/en-us/azure/security/fundamentals/network-best-practices)
 
-`Tags: `
+`Tags: `

scenarios/Agents/setup/network-secured-agent/azuredeploy.json

@@ -5,7 +5,7 @@
     "_generator": {
       "name": "bicep",
       "version": "0.33.93.31351",
-      "templateHash": "15839381951477066016"
+      "templateHash": "2121999007807216050"
     }
   },
   "parameters": {
@@ -65,11 +65,32 @@
         "description": "Description of your Azure AI resource displayed in AI studio"
       }
     },
-    "location": {
+    "resourceGroupLocation": {
       "type": "string",
       "defaultValue": "[resourceGroup().location]",
       "metadata": {
-        "description": "Azure region used for the deployment of all resources."
+        "description": "Resource group location"
+      }
+    },
+    "location": {
+      "type": "string",
+      "defaultValue": "[parameters('resourceGroupLocation')]",
+      "allowedValues": [
+        "australiaeast",
+        "eastus",
+        "eastus2",
+        "francecentral",
+        "japaneast",
+        "norwayeast",
+        "southindia",
+        "swedencentral",
+        "uaenorth",
+        "uksouth",
+        "westus",
+        "westus3"
+      ],
+      "metadata": {
+        "description": "Location for all resources."
       }
     },
     "tags": {

scenarios/Agents/setup/network-secured-agent/main.bicep

@@ -55,8 +55,25 @@ param defaultAiProjectFriendlyName string = 'Agents Project resource'
 @description('Description of your Azure AI resource displayed in AI studio')
 param defaultAiProjectDescription string = 'This is an example AI Project resource for use in Azure AI Studio.'
 
-@description('Azure region used for the deployment of all resources.')
-param location string = resourceGroup().location
+@description('Resource group location')
+param resourceGroupLocation string = resourceGroup().location
+
+@allowed([
+  'australiaeast'
+  'eastus'
+  'eastus2'
+  'francecentral'
+  'japaneast'
+  'norwayeast'
+  'southindia'
+  'swedencentral'
+  'uaenorth'
+  'uksouth'
+  'westus'
+  'westus3'
+])
+@description('Location for all resources.')
+param location string = resourceGroupLocation
 
 @description('Set of tags to apply to all resources.')
 param tags object = {}
@@ -109,6 +126,8 @@ param aiSearchServiceName string = ''
 param userAssignedIdentityDefaultName string = 'secured-agents-identity-${uniqueSuffix}'
 var uaiName = (userAssignedIdentityOverride == '') ? userAssignedIdentityDefaultName : userAssignedIdentityOverride
 
+
+
 module identity 'modules-network-secured/network-secured-identity.bicep' = {
   name: '${name}-${uniqueSuffix}--identity'
   params: {
@@ -118,8 +137,6 @@ module identity 'modules-network-secured/network-secured-identity.bicep' = {
   }
 }
 
-
-
 /* ---------------------------------- Create AI Assistant Dependent Resources ---------------------------------- */
 
 // var storageName = empty(aiStorageAccountName) ? '${defaultStorageName}${uniqueSuffix}' : aiStorageAccountName