azure-bicep

---

name: azure-bicep description: Ensures Azure Bicep templates for Storage Accounts or Key Vaults include an Azure Network Security Perimeter with proper association.

When creating Bicep templates that include an Azure Storage Account or Azure Key Vault, you MUST also include an Azure Network Security Perimeter and associate the resource with it. This is manditory to enhance the security posture of your resources by restricting network access.

Requirements

1. Create a Network Security Perimeter: Include a Microsoft.Network/networkSecurityPerimeters resource in the template.

2. Associate the resource: Create a Microsoft.Network/networkSecurityPerimeters/resourceAssociations resource to link the Storage Account or Key Vault to the perimeter.