Deploy Azure Firewall zone-redundant when possible (#127)

Azure · Sep 23, 2024 · 075def4 · 075def4
1 parent 6d050f1
commit 075def4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/research-hub/hub-modules/networking/azureFirewall.bicep b/research-hub/hub-modules/networking/azureFirewall.bicep
@@ -40,6 +40,7 @@ resource firewallPublicIps 'Microsoft.Network/publicIPAddresses@2022-09-01' = [
       publicIPAddressVersion: 'IPv4'
       publicIPAllocationMethod: 'Static'
     }
+    zones: pickZones('Microsoft.Network', 'publicIPAddresses', location, 3)
     tags: tags
   }
 ]
@@ -256,6 +257,8 @@ resource firewall 'Microsoft.Network/azureFirewalls@2022-01-01' = {
     }
   }
 
+  zones: pickZones('Microsoft.Network', 'azureFirewalls', location, 3)
+
   tags: tags
 
   // This dependency is added manually because otherwise the FW will try to deploy before the rule collections are ready