Azure / Azure/bicep-registry-modules
[AVM Module Issue]: Request addition of publicNetworkAccess parameter to ai-foundry::aiFoundryConfiguration
- Dominant language
- Bicep
- Stars
- 737
- Forks
- 564
- Avg merge
- 3d 15h
- Merged PRs (30d)
- 30
Description
### Check for previous/existing GitHub issues
- [x] I have checked for previous/existing GitHub issues
### Issue Type?
Feature Request
### Module Name
avm/ptn/ai-ml/ai-foundry
### (Optional) Module Version
0.6.0
### Description
This Pattern Module (br/public:avm/ptn/ai-ml/ai-foundry:0.6.0) configures the Foundry with Private endpoints and everything I need to work securely and my access can be set up to use an Azure VPN connection to the Private endpoint. Public access is disabled by default.
However, the only way to access the "New Foundry Experience" is to enable Public access. I can still have the Private endpoints and they will be used for backend data access, but I need to set up the networking to allow public access so I can use the New Foundry Experience.
I did not see anything in the AVM documentation about a setting to allow Public Network Access. Specifically, if I were to do this in the UI, I would navigate to the **Azure Foundry Resource> Resource Management> Networking>** and set the **Firewalls and Virtual Networks** tab to **Allow access from: All networks** (All networks, including the internet, can access this resource).
As soon as I enable this, I can access the New Foundry Experience" in Foundry.
Currently, I cannot set this setting in the Bicep AVM. In modules/account.bicep, the module hardcodes the logic:
`publicNetworkAccess: privateNetworkingEnabled ? 'Disabled' : 'Enabled'`
This means when you configure private endpoints, it automatically sets public access to 'Disabled'. I could like to request the addition of a publicNetworkAccess parameter to aiFoundryConfiguration. This can have a default but allow me to override the value and turn it on, even if I configured Private Endpoints.
### (Optional) Correlation Id
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.