[AVM Module Issue]: General Issue with Diagnostic settings

[awood-ops]

Check for previous/existing GitHub issues

• I have checked for previous/existing GitHub issues

Description

I've been deploying diagnostic settings across multiple modules fine until today, but now I can't seem to deploy with the diagnostic settings on. This has happened to me in two different tenant with different modules

Just wondering if this some new issue or if others are experiencing it?

'br/public:avm/res/web/site:0.16.0'
'br/public:avm/res/key-vault/vault:0.13.0'
'br/public:avm/res/storage/storage-account:0.20.0'

New-AzDeployment:
InvalidTemplate - Long running operation failed with status 'Failed'. Additional Info:'Deployment template validation failed: 'The template resource 'app_diagnosticSettings[0]' at line '1' and column '160415' is not valid: The template function 'copyIndex' is not valid. Please see https://aka.ms/arm-functions for usage details.. Please see https://aka.ms/arm-functions for usage details.'.'

New-AzDeployment:
InvalidTemplate - Long running operation failed with status 'Failed'. Additional Info:'Deployment template validation failed: 'The template resource 'storageAccount_diagnosticSettings[0]' at line '1' and column '539698' is not valid: The template function 'copyIndex' is not valid. Please see https://aka.ms/arm-functions for usage details.. Please see https://aka.ms/arm-functions for usage details.'.'

New-AzDeployment:
InvalidTemplate - Long running operation failed with status 'Failed'. Additional Info:'Deployment template validation failed: 'The template resource 'keyVault_diagnosticSettings[0]' at line '1' and column '416565' is not valid: The template function 'copyIndex' is not valid. Please see https://aka.ms/arm-functions for usage details.. Please see https://aka.ms/arm-functions for usage details.'.'

[awood-ops]

Could well be a duplicate of this one - #5517

[awood-ops]

@alex-frankel / @AlexanderSehr / @jtracey93 - apologies for the direct tag. As this appears to be an issue to most modules that utilise the diagnostic settings I didn't want it to get missed. Are you able to help and assign accordingly?

[jtracey93]

Hey @awood-ops could you share some correlation IDs?

#RR

[jtracey93]

Also @awood-ops could you share some module declarations so we can try and repro the same?

[awood-ops]

@jtracey93

I've had this one error out on me this morning with the same error, the only dependency is the resource group/nsg, I can share the bicepparam file if required too

module modResourceGroup 'br/public:avm/res/resources/resource-group:0.4.1' = {
  name: 'resourceGroupDeployment'
  params: {
    name: parResourceNames.resourceGroup
    location: parLocation
    tags: parTags
  }
}

module modNSG 'br/public:avm/res/network/network-security-group:0.5.1' = [for subnet in parSubnets: if (subnet.name != 'AzureFirewallSubnet' && subnet.name != 'AzureFirewallManagementSubnet' && subnet.name != 'GatewaySubnet') {
  scope: az.resourceGroup(parResourceNames.resourceGroup)
  name: 'nsgDeployment-${subnet.name}'
  params: {
    name: '${subnet.name}-NSG'
    location: parLocation
    tags: subnet.tags
    securityRules: subnet.securityRules
    diagnosticSettings: varLogAnalyticsWorkspace
  }
  dependsOn: [
    modResourceGroup
  ]
}]


module modHubNetworking 'br/public:avm/ptn/network/hub-networking:0.4.0' = {
  scope: az.resourceGroup(parResourceNames.resourceGroup)
  name: 'hubNetworkingDeployment'
  params: {
    hubVirtualNetworks: {
      '${parResourceNames.vnet}': {
        addressPrefixes: parAddressPrefixes
        azureFirewallSettings: {
          azureFirewallName: parResourceNames.azureFirewall
          azureSkuTier: parFirewallSkuTier
          diagnosticSettings: varLogAnalyticsWorkspace
          location: parLocation
          publicIPAddressObject: {
            name: parResourceNames.azureFirewallPublicIP
          }
          threatIntelMode: parFirewallThreatIntelMode
          zones: [
            1
          ]
          firewallPolicyId: modFirewallPolicy.outputs.resourceId
        }
        diagnosticSettings: [
          {
            metricCategories: [
              {
                category: 'AllMetrics'
              }
            ]
            name: 'customSetting'
            workspaceResourceId: resLogAnalyticsWorkspace.id
          }
        ]
        enableAzureFirewall: parEnableAzureFirewall
        enableBastion: parEnableBastion
        bastionHost: parBastionHostConfig
        enablePeering: false
        flowTimeoutInMinutes: parVnetFlowTimeoutInMinutes
        location: parLocation
        routes: [
          {
            name: 'defaultRoute'
            properties: {
              addressPrefix: '0.0.0.0/0'
              nextHopType: 'Internet'
            }
          }
        ]
        subnets: parSubnets
        tags: parTags
        vnetEncryption: false
        vnetEncryptionEnforcement: 'AllowUnencrypted'
      }
    }
    location: parLocation
  }
  dependsOn: [
    modResourceGroup
    modNSG
  ]
}

I'll try some of the workloads I was having issue with yesterday