AZR-000430: alz-ExpressRoute-Gateway failed Azure.VNG.MaintenanceConfig. Use a customer-controlled maintenance configuration for virtual network gateways.

AZR-000430: alz-Vpn-Gateway failed Azure.VNG.MaintenanceConfig. Use a customer-controlled maintenance configuration for virtual network gateways.

AZR-000359: deploy-vnet-peering-vwan-alz-sidecar-vnet-[parameters('parLocati failed Azure.Deployment.Name. Nested deployments should meet naming requirements of deployments.

AZR-000359: deploy-vnet-peering-vwan--[parameters('parLocation')] failed Azure.Deployment.Name. Nested deployments should meet naming requirements of deployments.

AZR-000268: alz-sidecar-vnet-[parameters('parLocation')] failed Azure.VNET.Name. Azure Resource Manager (ARM) has requirements for Virtual Network names.

AZR-000103: alz-fw-[parameters('parLocation')] failed Azure.Firewall.Name. Firewall names should meet naming requirements.

AZR-000399: alz-azfwpolicy-[parameters('parLocation')] failed Azure.Firewall.PolicyMode. Deny high confidence malicious IP addresses, domains and URLs.

AZR-000104: alz-azfwpolicy-[parameters('parLocation')] failed Azure.Firewall.PolicyName. Firewall policy names should meet naming requirements.

AZR-000399: contoso-azfwpolicy-westus-centralus failed Azure.Firewall.PolicyMode. Deny high confidence malicious IP addresses, domains and URLs.

Failed to expand bicep source '/home/runner/work/ALZ-Bicep/ALZ-Bicep/infra-as-code/bicep/modules/hubNetworking/samples/baseline.sample.bicep'. Exception calling "GetBicepResources" with "2" argument(s): "Unable to expand resources because the source file '/home/runner/work/ALZ-Bicep/ALZ-Bicep/infra-as-code/bicep/modules/hubNetworking/samples/baseline.sample.bicep' was not valid. The deployment 'root/baseline_hub_network_with_ER' with symbolic name '' failed. An error occurred evaluating expression '[concat(createArray(createObject('id', resourceId('Microsoft.Network/virtualNetworks', parameters('parHubNetworkName')), 'name', variables('varGwConfig')[copyIndex()].ipConfigurationName, 'properties', createObject('publicIPAddress', createObject('id', reference(format('modGatewayPublicIp[{0}]', copyIndex())).outputs.outPublicIpId.value), 'subnet', createObject('id', resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('parHubNetworkName'), 'GatewaySubnet'))))), if(variables('varGwConfig')[copyIndex()].activeActive, createArray(createObject('id', resourceId('Microsoft.Network/virtualNetworks', parameters('parHubNetworkName')), 'name', variables('varGwConfig')[copyIndex()].ipConfigurationActiveActiveName, 'properties', createObject('publicIPAddress', createObject('id', reference(format('modGatewayPublicIpActiveActive[{0}]', copyIndex())).outputs.outPublicIpId.value), 'subnet', createObject('id', resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('parHubNetworkName'), 'GatewaySubnet'))))), createArray()))]' line 6733 at path 'properties.ipConfigurations'. The language expression property 'ipConfigurationName' doesn't exist."

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Rule 'PSRule.Rules.Azure\Azure.VNG.VPNAvailabilityZoneSKU' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-fw-[parameters('parLocation')]'. Ignore the minimum sample configuration.

Rule 'PSRule.Rules.Azure\Azure.VNET.UseNSGs' was suppressed by suppression group '.\ALZ.MinimumSample' for 'alz-fw-[parameters('parLocation')]'. Ignore the minimum sample configuration.

Rule 'PSRule.Rules.Azure\Azure.VNG.VPNActiveActive' was suppressed by suppression group '.\ALZ.MinimumSample' for 'vnet-spoke'. Ignore the minimum sample configuration.

Rule 'PSRule.Rules.Azure\Azure.PublicIP.StandardSKU' was suppressed by suppression group '.\ALZ.MinimumSample' for 'vnet-spoke'. Ignore the minimum sample configuration.

Rule 'PSRule.Rules.Azure\Azure.Firewall.Mode' was suppressed by suppression group '.\ALZ.MinimumSample' for 'vnet-spoke'. Ignore the minimum sample configuration.

Rule 'PSRule.Rules.Azure\Azure.PublicIP.AvailabilityZone' was suppressed by suppression group '.\ALZ.MinimumSample' for 'vnet-spoke'. Ignore the minimum sample configuration.

Rule 'PSRule.Rules.Azure\Azure.VNG.VPNAvailabilityZoneSKU' was suppressed by suppression group '.\ALZ.MinimumSample' for 'vnet-spoke'. Ignore the minimum sample configuration.

Rule 'PSRule.Rules.Azure\Azure.VNET.UseNSGs' was suppressed by suppression group '.\ALZ.MinimumSample' for 'vnet-spoke'. Ignore the minimum sample configuration.

The option 'Execution.NotProcessedWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.

Using invariant culture may cause rule infomation to be displayed incorrectly. Consider using -Culture or set the Output.Culture option.