Azure / Azure/bicep-registry-modules

[AVM Module Issue]: Request addition of publicNetworkAccess parameter to ai-foundry::aiFoundryConfiguration

Open
#6,581 9 comments 0 reactions 2 assignees Claimed by @mswantek68 View on GitHub
Class: Pattern Module :package: Needs: Immediate Attention :bangbang: Status: Response Overdue :triangular_flag_on_post: Type: AVM :a: :v: :m: Type: Feature Request :heavy_plus_sign:
Dominant language
Bicep
Stars
737
Forks
564
Avg merge
3d 15h
Merged PRs (30d)
30

Description

### Check for previous/existing GitHub issues

- [x] I have checked for previous/existing GitHub issues

### Issue Type?

Feature Request

### Module Name

avm/ptn/ai-ml/ai-foundry

### (Optional) Module Version

0.6.0

### Description

This Pattern Module (br/public:avm/ptn/ai-ml/ai-foundry:0.6.0) configures the Foundry with Private endpoints and everything I need to work securely and my access can be set up to use an Azure VPN connection to the Private endpoint. Public access is disabled by default.
However, the only way to access the "New Foundry Experience" is to enable Public access. I can still have the Private endpoints and they will be used for backend data access, but I need to set up the networking to allow public access so I can use the New Foundry Experience.
I did not see anything in the AVM documentation about a setting to allow Public Network Access. Specifically, if I were to do this in the UI, I would navigate to the **Azure Foundry Resource> Resource Management> Networking>** and set the **Firewalls and Virtual Networks** tab to **Allow access from: All networks** (All networks, including the internet, can access this resource).
As soon as I enable this, I can access the New Foundry Experience" in Foundry.
Currently, I cannot set this setting in the Bicep AVM. In modules/account.bicep, the module hardcodes the logic:
`publicNetworkAccess: privateNetworkingEnabled ? 'Disabled' : 'Enabled'`
This means when you configure private endpoints, it automatically sets public access to 'Disabled'. I could like to request the addition of a publicNetworkAccess parameter to aiFoundryConfiguration. This can have a default but allow me to override the value and turn it on, even if I configured Private Endpoints.

### (Optional) Correlation Id

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.