subnets: [
      for (subnet, i) in virtualNetworkSubnets: (!empty(virtualNetworkSubnets))
        ? {
            name: subnet.name
            addressPrefix: subnet.?addressPrefix
            ipamPoolPrefixAllocations: subnet.?ipamPoolPrefixAllocations
            networkSecurityGroupResourceId: (virtualNetworkDeployBastion || subnet.name == 'AzureBastionSubnet')
              ? createBastionNsg.?outputs.resourceId
              : resourceId(
                  subscriptionId,
                  virtualNetworkResourceGroupName,
                  'Microsoft.Network/networkSecurityGroups',
                  '${createLzNsg[i].?outputs.name}'
                )
            routeTableResourceId: (!empty(subnet.?routeTableName) && !empty(routeTablesResourceGroupName))
              ? resourceId(
                  subscriptionId,
                  routeTablesResourceGroupName,
                  'Microsoft.Network/routeTables',
                  subnet.?routeTableName ?? ''
                )
              : null
            natGatewayResourceId: virtualNetworkDeployNatGateway && (subnet.?associateWithNatGateway ?? false)
              ? createNatGateway.?outputs.resourceId
              : null
            delegation: subnet.?delegation
          }
        : {}
    ]