"Allow access to Azure services" ARM 模板默认关闭
"Allow access to Azure services" turn off by default from ARM template
有人知道如何设置 ARM 模板以保持 "Allow access to Azure services" 开关默认关闭吗?
这是我目前拥有的
"resources": [
{
"name": "[parameters('serverName')]",
"type": "Microsoft.Sql/servers",
"location": "[parameters('location')]",
"apiVersion": "2014-04-01-preview",
"properties": {
"administratorLogin": "[parameters('administratorLogin')]",
"administratorLoginPassword": "[parameters('administratorLoginPassword')]",
"version": "[parameters('serverVersion')]"
},
"tags": {
"deploymentVersion": "[parameters('deploymentVersion')]",
"deploymentType": "[parameters('deploymentType')]"
},
"resources": [
{
"apiVersion": "2014-04-01-preview",
"dependsOn": [
"[concat('Microsoft.Sql/servers/', parameters('serverName'))]"
],
"location": "[parameters('location')]",
"name": "AllowAllWindowsAzureIps",
"properties": {
"endIpAddress": "0.0.0.0",
"startIpAddress": "0.0.0.0"
},
"type": "firewallrules"
}
]
} ]
只需删除嵌套的 resources
部分。然后 sql 将在没有该复选标记的情况下部署。重新部署不会删除规则,但部署新的 sql 会起作用。
只需将endIpAddress
和startIpAddress
修改为255.255.255.255
即可。如下所示:
{
"apiVersion": "2014-04-01-preview",
"dependsOn": [
"[concat('Microsoft.Sql/servers/', parameters('serverName'))]"
],
"location": "[parameters('location')]",
"name": "AllowAllWindowsAzureIps",
"properties": {
"endIpAddress": "255.255.255.255",
"startIpAddress": "255.255.255.255"
},
"type": "firewallrules"
}
我的经验是,当您使用名称 AllowAllWindowsAzureIps 作为防火墙资源类型时,它会忽略您在属性中指定的范围,而只是将 允许访问Azure 服务 标志开启。
如果您不想启用它,请不要在您的模板中包含具有该名称的资源。
有人知道如何设置 ARM 模板以保持 "Allow access to Azure services" 开关默认关闭吗?
这是我目前拥有的
"resources": [
{
"name": "[parameters('serverName')]",
"type": "Microsoft.Sql/servers",
"location": "[parameters('location')]",
"apiVersion": "2014-04-01-preview",
"properties": {
"administratorLogin": "[parameters('administratorLogin')]",
"administratorLoginPassword": "[parameters('administratorLoginPassword')]",
"version": "[parameters('serverVersion')]"
},
"tags": {
"deploymentVersion": "[parameters('deploymentVersion')]",
"deploymentType": "[parameters('deploymentType')]"
},
"resources": [
{
"apiVersion": "2014-04-01-preview",
"dependsOn": [
"[concat('Microsoft.Sql/servers/', parameters('serverName'))]"
],
"location": "[parameters('location')]",
"name": "AllowAllWindowsAzureIps",
"properties": {
"endIpAddress": "0.0.0.0",
"startIpAddress": "0.0.0.0"
},
"type": "firewallrules"
}
]
} ]
只需删除嵌套的 resources
部分。然后 sql 将在没有该复选标记的情况下部署。重新部署不会删除规则,但部署新的 sql 会起作用。
只需将endIpAddress
和startIpAddress
修改为255.255.255.255
即可。如下所示:
{
"apiVersion": "2014-04-01-preview",
"dependsOn": [
"[concat('Microsoft.Sql/servers/', parameters('serverName'))]"
],
"location": "[parameters('location')]",
"name": "AllowAllWindowsAzureIps",
"properties": {
"endIpAddress": "255.255.255.255",
"startIpAddress": "255.255.255.255"
},
"type": "firewallrules"
}
我的经验是,当您使用名称 AllowAllWindowsAzureIps 作为防火墙资源类型时,它会忽略您在属性中指定的范围,而只是将 允许访问Azure 服务 标志开启。
如果您不想启用它,请不要在您的模板中包含具有该名称的资源。