Add parAzBastionEnabled for nsg linking to subnet

Fixes #573
Azure · Jul 15, 2023 · 71c7fbc · 71c7fbc
1 parent 311d113
commit 71c7fbc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/infra-as-code/bicep/modules/hubNetworking/hubNetworking.bicep b/infra-as-code/bicep/modules/hubNetworking/hubNetworking.bicep
@@ -284,7 +284,7 @@ var varSubnetProperties = [for subnet in varSubnetMap: {
       }
     ]
 
-    networkSecurityGroup: (subnet.name == 'AzureBastionSubnet') ? {
+    networkSecurityGroup: (subnet.name == 'AzureBastionSubnet' && parAzBastionEnabled) ? {
       id: '${resourceGroup().id}/providers/Microsoft.Network/networkSecurityGroups/${parAzBastionNsgName}'
     } : (empty(subnet.networkSecurityGroupId)) ? null : {
       id: subnet.networkSecurityGroupId