AzAdvertizer data changes detected

Azure Advertizer Data Diff Report

Resource Type: microsoft.appconfiguration/configurationstores
--------------------------------------------------
New PSRule Recommendations:
- [App Configuration Store replica location is not allowed](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.AppConfig.ReplicaLocation)

Resource Type: microsoft.appconfiguration/configurationstores/replicas
--------------------------------------------------
New PSRule Recommendations:
- [App Configuration Store replica location is not allowed](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.AppConfig.ReplicaLocation)

Resource Type: microsoft.cognitiveservices/accounts/project_agent
--------------------------------------------------
New Advisor Recommendations:
- [Foundry AI Agent with Indirect prompt Injection risk should require human in the loop control for MCP tool actions](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/9975f806-9c80-48f6-847e-3c0d79f167a9)
- [Foundry AI Agent with Indirect prompt Injection risk should use enhanced guardrails controls](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/145a43df-f0be-443a-89c0-9d41ec7c0add)

Resource Type: microsoft.dashboard/grafana
--------------------------------------------------
New PSRule Recommendations:
- [Use zone redundant Managed Grafana workspaces](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Grafana.AvailabilityZone)

Resource Type: microsoft.documentdb/cassandraclusters
--------------------------------------------------
New PSRule Recommendations:
- [Use zone redundant Managed Instance for Apache Cassandra clusters](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.MICassandra.AvailabilityZone)

Resource Type: microsoft.documentdb/cassandraclusters/datacenters
--------------------------------------------------
New PSRule Recommendations:
- [Use zone redundant Managed Instance for Apache Cassandra clusters](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.MICassandra.AvailabilityZone)

Resource Type: microsoft.documentdb/databaseaccounts
--------------------------------------------------
New PSRule Recommendations:
- [Use zone redundant Cosmos DB accounts](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Cosmos.AvailabilityZone)
- [Cosmos DB NoSQL API account access keys are enabled](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Cosmos.NoSQLLocalAuth)

Resource Type: microsoft.documentdb/mongoclusters
--------------------------------------------------
New PSRule Recommendations:
- [Use zone redundant Cosmos DB MongoDB vCore clusters](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Cosmos.MongoAvailabilityZone)
- [MongoDB vCore clusters should use Microsoft Entra ID authentication](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.Cosmos.MongoEntraID)

Resource Type: microsoft.eventhub/namespaces
--------------------------------------------------
New PSRule Recommendations:
- [Use zone redundant Event Hub namespaces](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.EventHub.AvailabilityZone)

Resource Type: microsoft.kusto/clusters
--------------------------------------------------
New PSRule Recommendations:
- [Disable public network access on Data Explorer clusters](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.ADX.PublicAccess)

Resource Type: microsoft.network/azurefirewalls
--------------------------------------------------
New APRL Recommendations:
- [Monitor "AZFW Latency Probe" metric](https://azure.github.io/Azure-Proactive-Resiliency-Library-v2/azure-resources/Network/azureFirewalls/#monitor-azfw-latency-probe-metric)

Resource Type: microsoft.security/awsresource
--------------------------------------------------
New Advisor Recommendations:
- [Avoid the use of the "root" account](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/a47a6c3b-0629-406c-ad09-d91f7d9f78a3)
- [IAM policies that allow full "*:*" administrative privileges should not be created](https://portal.azure.com/#view/Microsoft_Azure_Expert/RecommendationList.ReactView/recommendationTypeId/1d08b362-7e24-46b0-bed1-4a6c1d1526a5)

Resource Type: microsoft.sql/servers
--------------------------------------------------
New PSRule Recommendations:
- [Customer-controlled maintenance window configuration](https://azure.github.io/PSRule.Rules.Azure/en/rules/Azure.SQL.MaintenanceWindow)

Start with the linked PSRule, Advisor, and APRL recommendation pages and the affected Azure resource types listed in the report. Identify the corresponding AVM modules and determine which recommendations require changes; done requires the relevant modules and their validation to reflect the applicable recommendations.

Written by the indexing model from the issue text.