Azure / Azure/bicep-types-az

Unable to rerun code for Microsoft.Network/networkVirtualAppliances and a firewall is connected

Open
#2,218 1 comment 0 reactions 0 assignees View on GitHub
Needs: Triage :mag:
Dominant language
TypeScript
Stars
108
Forks
44
Avg merge
18h 53m
Merged PRs (30d)
29

Description

**Bicep version**
Bicep CLI version 0.28.1 (ba1e9f8c1e)

**Describe the bug**
When creating a vWan hub with a secure hub using PaloAlto (PaloAltoNetworks.Cloudngfw/firewalls) it needs a NVA that is required to be created
Creating the resource works fine, but rerunning the code will set the deployment to fail with the error "NvaAccessDeniedForTheApp"

**To Reproduce**
Create a vwan with a paloAlto FW and the NVA resource with the following code, when the firewall is deployed

```
resource firewallNVA 'Microsoft.Network/networkVirtualAppliances@2023-11-01' = if(!existingNVA) {
name: '${firewallName}-nva'
location: location
properties: {
virtualHub: {
id: virtualHubId
}
delegation: {
serviceName: 'PaloAltoNetworks.Cloudngfw/firewalls'
}
}
}
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the provided Microsoft.Network/networkVirtualAppliances@2023-11-01 resource declaration and reproduce the deployment using a vWAN secure hub with a PaloAlto firewall. Compare the initial deployment with the rerun that returns NvaAccessDeniedForTheApp; done means the same declaration can be rerun successfully without that error.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.