Skip to content

Conversation

@NirajC-Microsoft
Copy link
Contributor

This pull request makes adjustments to the configuration of various Azure resources in the infra/main.bicep file to enhance security and simplify deployment. The key changes involve disabling public blob access, ensuring non-zone-redundant setups, and standardizing configurations across modules.

Security Enhancements:

Updated the aiFoundryStorageAccount module to always disable blob public access, regardless of the virtualNetworkEnabled setting.

Zone Redundancy Adjustments:

Added isZoneRedundant: false to the cosmosDb module configuration to explicitly disable zone redundancy.
Modified the containerAppEnvironment module to set zoneRedundant to false, removing conditional logic based on virtualNetworkEnabled.## Purpose

Does this introduce a breaking change?

  • Yes
  • No

How to Test

  • Get the code
git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install
  • Test the code

What to Check

Verify that the following are valid

  • ...

Other Information

@Roopan-Microsoft Roopan-Microsoft merged commit fdaf312 into main Jun 12, 2025
9 checks passed
@NirajC-Microsoft NirajC-Microsoft deleted the psl-bug-macae-19139 branch July 14, 2025 04:50
blessing-msft pushed a commit that referenced this pull request Aug 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants