Skip to content

What's New

19th May 2026

  • AI Landing Zones Bicep v2.0.2 released. Hotfix for a v2.0.0 regression that caused azd provision to fail mid-deployment with InvalidTemplate: 'databaseAccount_privateEndpoints[0]' / 'keyVault_privateEndpoints[0]' ... 'reference' is not valid: all function arguments should be string literals. whenever networkIsolation=false was combined with the default deployAiFoundry=true. The fix gates the AI Foundry private-endpoint subnet on _networkIsolation, mirroring an existing sibling pattern in the same file. No behavior change for the networkIsolation=true (Zero Trust) topology. Release: v2.0.2.
  • AI Landing Zones Bicep v2.0.1 released. Hotfix for a v2.0.0 regression in the AI Foundry account private-endpoint emission that caused azd provision to fail with InvalidTemplate: 'The resource 'Microsoft.Resources/deployments/module.account.pe.<name>' is not defined in the template' during template validation. Single-line fix; no behavior change for any topology. Release: v2.0.1.

18th May 2026

AI Landing Zones Bicep v2 released. Adds hub-and-spoke composability and granular reuse of platform resources for Application Landing Zone (ALZ) integrated topologies.

Highlights:

  • Topology preset — new deploymentMode parameter (standalone / ailz-integrated) picks the deployment shape in one place
  • IP allow-lists — new allowedIpRanges parameter for "Zero Trust + named developer IPs" hybrid scenarios, applied uniformly to 7 PaaS services
  • Decoupled jumpbox / Bastion / NAT Gateway — each is now an independent flag, each with a BYO existingResourceId variant
  • Observability reuse — bring your own Log Analytics workspace and Application Insights, including cross-subscription scenarios
  • Granular BYO Private DNS — 15 per-zone override parameters, plus dnsZoneLinkSuffix for multi-spoke shared-zone topologies
  • Hub integration — new spoke→hub VNet peering (created by main.bicep) and external-egress UDR via hub firewall/NVA
  • Pre-flight validation — scripts/Invoke-PreflightChecks.ps1 runs as an azd preprovision hook and catches parameter mistakes before they reach ARM

See the Hub-and-Spoke Topology runbook for full details. Release: v2.0.0.

17th November 2025

  • AI Landing Zones goes from preview to GA
  • AI Landing Zones Terraform guide published

6th November 2025

  • AI Landing Zones Cost Guide added to documentation

5th November 2025

  • Updated the AI Landing Zones Design checklist with new checks along with restructuring by design areas, considerations and recommendations.
  • Update the terraform sample code for AI Landing Zones.
© 2026 Azure AI Landing Zones