@@ -220,9 +220,6 @@ resource resourceGroupTags 'Microsoft.Resources/tags@2025-04-01' = {
220220 }
221221}
222222
223- // AVM Telemetry: Standard Azure Verified Modules (AVM) no-op marker deployment.
224- // Deploys zero actual resources — used only to track AVM module usage telemetry.
225- // Gated by the enableTelemetry parameter (default: true). See https://aka.ms/avm/TelemetryInfo
226223#disable-next-line no-deployments-resources
227224resource avmTelemetry 'Microsoft.Resources/deployments@2024-03-01' = if (enableTelemetry ) {
228225 name : '46d3xbcp.ptn.sa-convknowledgemining.${replace ('-..--..-' , '.' , '-' )}.${substring (uniqueString (deployment ().name , location ), 0 , 4 )}'
@@ -325,10 +322,6 @@ module applicationInsights 'br/public:avm/res/insights/component:0.7.1' = if (en
325322 }
326323}
327324// ========== Virtual Network and Networking Components ========== //
328- // NOTE: All resources in this section (VNet, Bastion, Jumpbox VM, Private DNS Zones, Private Endpoints)
329- // are gated behind enablePrivateNetworking (default: false). These are infrastructure-only resources
330- // required for WAF-aligned deployments with private networking. They provide secure network connectivity
331- // and operational access (jumpbox/bastion for RDP/SSH) — no application code references are expected.
332325
333326// Virtual Network with NSGs and Subnets
334327module virtualNetwork 'modules/virtualNetwork.bicep' = if (enablePrivateNetworking ) {
@@ -343,7 +336,7 @@ module virtualNetwork 'modules/virtualNetwork.bicep' = if (enablePrivateNetworki
343336 enableTelemetry : enableTelemetry
344337 }
345338}
346- // Azure Bastion Host — provides secure RDP/SSH access to the Jumpbox VM without exposing public IPs
339+ // Azure Bastion Host
347340var bastionHostName = 'bas-${solutionSuffix }'
348341module bastionHost 'br/public:avm/res/network/bastion-host:0.8.2' = if (enablePrivateNetworking ) {
349342 name : take ('avm.res.network.bastion-host.${bastionHostName }' , 64 )
@@ -372,7 +365,7 @@ module bastionHost 'br/public:avm/res/network/bastion-host:0.8.2' = if (enablePr
372365 }
373366}
374367
375- // Jumpbox Virtual Machine — provides operational access to private network resources via Bastion
368+ // Jumpbox Virtual Machine
376369var jumpboxVmName = take ('vm-jumpbox-${solutionSuffix }' , 15 )
377370module jumpboxVM 'br/public:avm/res/compute/virtual-machine:0.21.0' = if (enablePrivateNetworking ) {
378371 name : take ('avm.res.compute.virtual-machine.${jumpboxVmName }' , 64 )
@@ -432,8 +425,6 @@ module jumpboxVM 'br/public:avm/res/compute/virtual-machine:0.21.0' = if (enable
432425}
433426
434427// ========== Private DNS Zones ========== //
435- // These DNS zones enable private endpoint name resolution for all Azure services in WAF deployments.
436- // Each zone is linked to the VNet and allows private endpoints to resolve to internal IPs.
437428var privateDnsZones = [
438429 'privatelink.cognitiveservices.azure.com'
439430 'privatelink.openai.azure.com'
0 commit comments