Update cognitiveservices.bicep with networkAcls

Azure · Nov 28, 2023 · ccf7d64 · ccf7d64
1 parent f00f37d
commit ccf7d64
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/templates/common/infra/bicep/core/ai/cognitiveservices.bicep b/templates/common/infra/bicep/core/ai/cognitiveservices.bicep
@@ -6,11 +6,21 @@ param tags object = {}
 param customSubDomainName string = name
 param deployments array = []
 param kind string = 'OpenAI'
+
+@allowed([ 'Enabled', 'Disabled' ])
 param publicNetworkAccess string = 'Enabled'
 param sku object = {
   name: 'S0'
 }
 
+param allowedIpRules array = []
+param networkAcls object = empty(allowedIpRules) ? {
+  defaultAction: 'Allow'
+} : {
+  ipRules: allowedIpRules
+  defaultAction: 'Deny'
+}
+
 resource account 'Microsoft.CognitiveServices/accounts@2023-05-01' = {
   name: name
   location: location
@@ -19,6 +29,7 @@ resource account 'Microsoft.CognitiveServices/accounts@2023-05-01' = {
   properties: {
     customSubDomainName: customSubDomainName
     publicNetworkAccess: publicNetworkAccess
+    networkAcls: networkAcls
   }
   sku: sku
 }