chore: update trainer infra and code

Author: sinedied

trainer/infra/abbreviations.json

@@ -1,135 +1,137 @@
 {
-  "analysisServicesServers": "as",
-  "apiManagementService": "apim-",
-  "appConfigurationConfigurationStores": "appcs-",
-  "appManagedEnvironments": "cae-",
-  "appContainerApps": "ca-",
-  "authorizationPolicyDefinitions": "policy-",
-  "automationAutomationAccounts": "aa-",
-  "blueprintBlueprints": "bp-",
-  "blueprintBlueprintsArtifacts": "bpa-",
-  "cacheRedis": "redis-",
-  "cdnProfiles": "cdnp-",
-  "cdnProfilesEndpoints": "cdne-",
-  "cognitiveServicesAccounts": "cog-",
-  "cognitiveServicesFormRecognizer": "cog-fr-",
-  "cognitiveServicesTextAnalytics": "cog-ta-",
-  "computeAvailabilitySets": "avail-",
-  "computeCloudServices": "cld-",
-  "computeDiskEncryptionSets": "des",
-  "computeDisks": "disk",
-  "computeDisksOs": "osdisk",
-  "computeGalleries": "gal",
-  "computeSnapshots": "snap-",
-  "computeVirtualMachines": "vm",
-  "computeVirtualMachineScaleSets": "vmss-",
-  "containerInstanceContainerGroups": "ci",
-  "containerRegistryRegistries": "cr",
-  "containerServiceManagedClusters": "aks-",
-  "databricksWorkspaces": "dbw-",
-  "dataFactoryFactories": "adf-",
-  "dataLakeAnalyticsAccounts": "dla",
-  "dataLakeStoreAccounts": "dls",
-  "dataMigrationServices": "dms-",
-  "dBforMySQLServers": "mysql-",
-  "dBforPostgreSQLServers": "psql-",
-  "devicesIotHubs": "iot-",
-  "devicesProvisioningServices": "provs-",
-  "devicesProvisioningServicesCertificates": "pcert-",
-  "documentDBDatabaseAccounts": "cosmos-",
-  "eventGridDomains": "evgd-",
-  "eventGridDomainsTopics": "evgt-",
-  "eventGridEventSubscriptions": "evgs-",
-  "eventHubNamespaces": "evhns-",
-  "eventHubNamespacesEventHubs": "evh-",
-  "hdInsightClustersHadoop": "hadoop-",
-  "hdInsightClustersHbase": "hbase-",
-  "hdInsightClustersKafka": "kafka-",
-  "hdInsightClustersMl": "mls-",
-  "hdInsightClustersSpark": "spark-",
-  "hdInsightClustersStorm": "storm-",
-  "hybridComputeMachines": "arcs-",
-  "insightsActionGroups": "ag-",
-  "insightsComponents": "appi-",
-  "keyVaultVaults": "kv-",
-  "kubernetesConnectedClusters": "arck",
-  "kustoClusters": "dec",
-  "kustoClustersDatabases": "dedb",
-  "logicIntegrationAccounts": "ia-",
-  "logicWorkflows": "logic-",
-  "machineLearningServicesWorkspaces": "mlw-",
-  "managedIdentityUserAssignedIdentities": "id-",
-  "managementManagementGroups": "mg-",
-  "migrateAssessmentProjects": "migr-",
-  "networkApplicationGateways": "agw-",
-  "networkApplicationSecurityGroups": "asg-",
-  "networkAzureFirewalls": "afw-",
-  "networkBastionHosts": "bas-",
-  "networkConnections": "con-",
-  "networkDnsZones": "dnsz-",
-  "networkExpressRouteCircuits": "erc-",
-  "networkFirewallPolicies": "afwp-",
-  "networkFirewallPoliciesWebApplication": "waf",
-  "networkFirewallPoliciesRuleGroups": "wafrg",
-  "networkFrontDoors": "fd-",
-  "networkFrontdoorWebApplicationFirewallPolicies": "fdfp-",
-  "networkLoadBalancersExternal": "lbe-",
-  "networkLoadBalancersInternal": "lbi-",
-  "networkLoadBalancersInboundNatRules": "rule-",
-  "networkLocalNetworkGateways": "lgw-",
-  "networkNatGateways": "ng-",
-  "networkNetworkInterfaces": "nic-",
-  "networkNetworkSecurityGroups": "nsg-",
-  "networkNetworkSecurityGroupsSecurityRules": "nsgsr-",
-  "networkNetworkWatchers": "nw-",
-  "networkPrivateDnsZones": "pdnsz-",
-  "networkPrivateLinkServices": "pl-",
-  "networkPublicIPAddresses": "pip-",
-  "networkPublicIPPrefixes": "ippre-",
-  "networkRouteFilters": "rf-",
-  "networkRouteTables": "rt-",
-  "networkRouteTablesRoutes": "udr-",
-  "networkTrafficManagerProfiles": "traf-",
-  "networkVirtualNetworkGateways": "vgw-",
-  "networkVirtualNetworks": "vnet-",
-  "networkVirtualNetworksSubnets": "snet-",
-  "networkVirtualNetworksVirtualNetworkPeerings": "peer-",
-  "networkVirtualWans": "vwan-",
-  "networkVpnGateways": "vpng-",
-  "networkVpnGatewaysVpnConnections": "vcn-",
-  "networkVpnGatewaysVpnSites": "vst-",
-  "notificationHubsNamespaces": "ntfns-",
-  "notificationHubsNamespacesNotificationHubs": "ntf-",
-  "operationalInsightsWorkspaces": "log-",
-  "portalDashboards": "dash-",
-  "powerBIDedicatedCapacities": "pbi-",
-  "purviewAccounts": "pview-",
-  "recoveryServicesVaults": "rsv-",
-  "resourcesResourceGroups": "rg-",
-  "searchSearchServices": "srch-",
-  "serviceBusNamespaces": "sb-",
-  "serviceBusNamespacesQueues": "sbq-",
-  "serviceBusNamespacesTopics": "sbt-",
-  "serviceEndPointPolicies": "se-",
-  "serviceFabricClusters": "sf-",
-  "signalRServiceSignalR": "sigr",
-  "sqlManagedInstances": "sqlmi-",
-  "sqlServers": "sql-",
-  "sqlServersDataWarehouse": "sqldw-",
-  "sqlServersDatabases": "sqldb-",
-  "sqlServersDatabasesStretch": "sqlstrdb-",
-  "storageStorageAccounts": "st",
-  "storageStorageAccountsVm": "stvm",
-  "storSimpleManagers": "ssimp",
-  "streamAnalyticsCluster": "asa-",
-  "synapseWorkspaces": "syn",
-  "synapseWorkspacesAnalyticsWorkspaces": "synw",
-  "synapseWorkspacesSqlPoolsDedicated": "syndp",
-  "synapseWorkspacesSqlPoolsSpark": "synsp",
-  "timeSeriesInsightsEnvironments": "tsi-",
-  "webServerFarms": "plan-",
-  "webSitesAppService": "app-",
-  "webSitesAppServiceEnvironment": "ase-",
-  "webSitesFunctions": "func-",
-  "webStaticSites": "stapp-"
+    "analysisServicesServers": "as",
+    "apiManagementService": "apim-",
+    "appConfigurationStores": "appcs-",
+    "appManagedEnvironments": "cae-",
+    "appContainerApps": "ca-",
+    "authorizationPolicyDefinitions": "policy-",
+    "automationAutomationAccounts": "aa-",
+    "blueprintBlueprints": "bp-",
+    "blueprintBlueprintsArtifacts": "bpa-",
+    "cacheRedis": "redis-",
+    "cdnProfiles": "cdnp-",
+    "cdnProfilesEndpoints": "cdne-",
+    "cognitiveServicesAccounts": "cog-",
+    "cognitiveServicesFormRecognizer": "cog-fr-",
+    "cognitiveServicesTextAnalytics": "cog-ta-",
+    "cognitiveServicesSpeech": "cog-sp-",
+    "computeAvailabilitySets": "avail-",
+    "computeCloudServices": "cld-",
+    "computeDiskEncryptionSets": "des",
+    "computeDisks": "disk",
+    "computeDisksOs": "osdisk",
+    "computeGalleries": "gal",
+    "computeSnapshots": "snap-",
+    "computeVirtualMachines": "vm",
+    "computeVirtualMachineScaleSets": "vmss-",
+    "containerInstanceContainerGroups": "ci",
+    "containerRegistryRegistries": "cr",
+    "containerServiceManagedClusters": "aks-",
+    "databricksWorkspaces": "dbw-",
+    "dataFactoryFactories": "adf-",
+    "dataLakeAnalyticsAccounts": "dla",
+    "dataLakeStoreAccounts": "dls",
+    "dataMigrationServices": "dms-",
+    "dBforMySQLServers": "mysql-",
+    "dBforPostgreSQLServers": "psql-",
+    "devicesIotHubs": "iot-",
+    "devicesProvisioningServices": "provs-",
+    "devicesProvisioningServicesCertificates": "pcert-",
+    "documentDBDatabaseAccounts": "cosmos-",
+    "eventGridDomains": "evgd-",
+    "eventGridDomainsTopics": "evgt-",
+    "eventGridEventSubscriptions": "evgs-",
+    "eventHubNamespaces": "evhns-",
+    "eventHubNamespacesEventHubs": "evh-",
+    "hdInsightClustersHadoop": "hadoop-",
+    "hdInsightClustersHbase": "hbase-",
+    "hdInsightClustersKafka": "kafka-",
+    "hdInsightClustersMl": "mls-",
+    "hdInsightClustersSpark": "spark-",
+    "hdInsightClustersStorm": "storm-",
+    "hybridComputeMachines": "arcs-",
+    "insightsActionGroups": "ag-",
+    "insightsComponents": "appi-",
+    "keyVaultVaults": "kv-",
+    "kubernetesConnectedClusters": "arck",
+    "kustoClusters": "dec",
+    "kustoClustersDatabases": "dedb",
+    "loadTesting": "lt-",
+    "logicIntegrationAccounts": "ia-",
+    "logicWorkflows": "logic-",
+    "machineLearningServicesWorkspaces": "mlw-",
+    "managedIdentityUserAssignedIdentities": "id-",
+    "managementManagementGroups": "mg-",
+    "migrateAssessmentProjects": "migr-",
+    "networkApplicationGateways": "agw-",
+    "networkApplicationSecurityGroups": "asg-",
+    "networkAzureFirewalls": "afw-",
+    "networkBastionHosts": "bas-",
+    "networkConnections": "con-",
+    "networkDnsZones": "dnsz-",
+    "networkExpressRouteCircuits": "erc-",
+    "networkFirewallPolicies": "afwp-",
+    "networkFirewallPoliciesWebApplication": "waf",
+    "networkFirewallPoliciesRuleGroups": "wafrg",
+    "networkFrontDoors": "fd-",
+    "networkFrontdoorWebApplicationFirewallPolicies": "fdfp-",
+    "networkLoadBalancersExternal": "lbe-",
+    "networkLoadBalancersInternal": "lbi-",
+    "networkLoadBalancersInboundNatRules": "rule-",
+    "networkLocalNetworkGateways": "lgw-",
+    "networkNatGateways": "ng-",
+    "networkNetworkInterfaces": "nic-",
+    "networkNetworkSecurityGroups": "nsg-",
+    "networkNetworkSecurityGroupsSecurityRules": "nsgsr-",
+    "networkNetworkWatchers": "nw-",
+    "networkPrivateDnsZones": "pdnsz-",
+    "networkPrivateLinkServices": "pl-",
+    "networkPublicIPAddresses": "pip-",
+    "networkPublicIPPrefixes": "ippre-",
+    "networkRouteFilters": "rf-",
+    "networkRouteTables": "rt-",
+    "networkRouteTablesRoutes": "udr-",
+    "networkTrafficManagerProfiles": "traf-",
+    "networkVirtualNetworkGateways": "vgw-",
+    "networkVirtualNetworks": "vnet-",
+    "networkVirtualNetworksSubnets": "snet-",
+    "networkVirtualNetworksVirtualNetworkPeerings": "peer-",
+    "networkVirtualWans": "vwan-",
+    "networkVpnGateways": "vpng-",
+    "networkVpnGatewaysVpnConnections": "vcn-",
+    "networkVpnGatewaysVpnSites": "vst-",
+    "notificationHubsNamespaces": "ntfns-",
+    "notificationHubsNamespacesNotificationHubs": "ntf-",
+    "operationalInsightsWorkspaces": "log-",
+    "portalDashboards": "dash-",
+    "powerBIDedicatedCapacities": "pbi-",
+    "purviewAccounts": "pview-",
+    "recoveryServicesVaults": "rsv-",
+    "resourcesResourceGroups": "rg-",
+    "searchSearchServices": "srch-",
+    "serviceBusNamespaces": "sb-",
+    "serviceBusNamespacesQueues": "sbq-",
+    "serviceBusNamespacesTopics": "sbt-",
+    "serviceEndPointPolicies": "se-",
+    "serviceFabricClusters": "sf-",
+    "signalRServiceSignalR": "sigr",
+    "sqlManagedInstances": "sqlmi-",
+    "sqlServers": "sql-",
+    "sqlServersDataWarehouse": "sqldw-",
+    "sqlServersDatabases": "sqldb-",
+    "sqlServersDatabasesStretch": "sqlstrdb-",
+    "storageStorageAccounts": "st",
+    "storageStorageAccountsVm": "stvm",
+    "storSimpleManagers": "ssimp",
+    "streamAnalyticsCluster": "asa-",
+    "synapseWorkspaces": "syn",
+    "synapseWorkspacesAnalyticsWorkspaces": "synw",
+    "synapseWorkspacesSqlPoolsDedicated": "syndp",
+    "synapseWorkspacesSqlPoolsSpark": "synsp",
+    "timeSeriesInsightsEnvironments": "tsi-",
+    "webServerFarms": "plan-",
+    "webSitesAppService": "app-",
+    "webSitesAppServiceEnvironment": "ase-",
+    "webSitesFunctions": "func-",
+    "webStaticSites": "stapp-"
 }

trainer/infra/core/ai/cognitiveservices.bicep

@@ -1,15 +1,27 @@
+metadata description = 'Creates an Azure Cognitive Services instance.'
 param name string
 param location string = resourceGroup().location
 param tags object = {}
-
+@description('The custom subdomain name used to access the API. Defaults to the value of the name parameter.')
 param customSubDomainName string = name
+param disableLocalAuth bool = false
 param deployments array = []
 param kind string = 'OpenAI'
+
+@allowed([ 'Enabled', 'Disabled' ])
 param publicNetworkAccess string = 'Enabled'
 param sku object = {
   name: 'S0'
 }
 
+param allowedIpRules array = []
+param networkAcls object = empty(allowedIpRules) ? {
+  defaultAction: 'Allow'
+} : {
+  ipRules: allowedIpRules
+  defaultAction: 'Deny'
+}
+
 resource account 'Microsoft.CognitiveServices/accounts@2023-05-01' = {
   name: name
   location: location
@@ -18,6 +30,8 @@ resource account 'Microsoft.CognitiveServices/accounts@2023-05-01' = {
   properties: {
     customSubDomainName: customSubDomainName
     publicNetworkAccess: publicNetworkAccess
+    networkAcls: networkAcls
+    disableLocalAuth: disableLocalAuth
   }
   sku: sku
 }
@@ -37,5 +51,6 @@ resource deployment 'Microsoft.CognitiveServices/accounts/deployments@2023-05-01
 }]
 
 output endpoint string = account.properties.endpoint
+output endpoints object = account.properties.endpoints
 output id string = account.id
 output name string = account.name