From f839d2473dd13dd6b340133b170286ef39d9553e Mon Sep 17 00:00:00 2001
From: "Niraj Chaudhari (Persistent Systems Inc)" <v-nirajcha@microsoft.com>
Date: Wed, 11 Jun 2025 18:57:39 +0530
Subject: [PATCH] Disable Zone Redundant

---
 infra/main.bicep | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/infra/main.bicep b/infra/main.bicep
index 5ed74e07..9991ad76 100644
--- a/infra/main.bicep
+++ b/infra/main.bicep
@@ -861,7 +861,7 @@ module aiFoundryStorageAccount 'br/public:avm/res/storage/storage-account:0.18.2
       diagnosticSettings: [{ workspaceResourceId: logAnalyticsWorkspaceId }]
     }
     publicNetworkAccess: virtualNetworkEnabled ? 'Disabled' : 'Enabled'
-    allowBlobPublicAccess: virtualNetworkEnabled ? false : true
+    allowBlobPublicAccess: false
     privateEndpoints: virtualNetworkEnabled
       ? map(items(storageAccountPrivateDnsZones), zone => {
           name: 'pep-${zone.value}-${aiFoundryStorageAccountResourceName}'
@@ -1036,6 +1036,7 @@ module cosmosDb 'br/public:avm/res/document-db/database-account:0.12.0' = if (co
       {
         locationName: cosmosDbAccountConfiguration.?location ?? solutionLocation
         failoverPriority: 0
+        isZoneRedundant: false
       }
     ]
     capabilitiesToAdd: [
@@ -1073,7 +1074,7 @@ module containerAppEnvironment 'modules/container-app-environment.bicep' = if (c
     location: containerAppEnvironmentConfiguration.?location ?? solutionLocation
     logAnalyticsResourceId: logAnalyticsWorkspaceId
     publicNetworkAccess: 'Enabled'
-    zoneRedundant: virtualNetworkEnabled ? true : false
+    zoneRedundant: false
     applicationInsightsConnectionString: applicationInsights.outputs.connectionString
     enableTelemetry: enableTelemetry
     subnetResourceId: virtualNetworkEnabled