final changes

Author: Shreyas-Microsoft

infra/main.bicep

@@ -217,25 +217,38 @@ module network 'modules/network.bicep' = if (enablePrivateNetworking) {
 }
 
 module aiServices 'modules/ai-foundry/main.bicep' = {
-  name: take('aiservices-${resourcesName}-deployment', 64)
-  #disable-next-line no-unnecessary-dependson
-  dependsOn: [logAnalyticsWorkspace, network] // required due to optional flags that could change dependency
+  name: take('avm.res.cognitive-services.account.${resourcesName}', 64)
   params: {
     name: 'ais-${resourcesName}'
     location: aiDeploymentsLocation
     sku: 'S0'
     kind: 'AIServices'
-    deployments: [modelDeployment]
-    projectName: 'proj-${resourcesName}'
-    projectDescription: 'aifp-${solutionUniqueToken}'
+    deployments: [ modelDeployment ]
+    projectName: 'aifp-${resourcesName}'
+    projectDescription: 'aifp-${resourcesName}'
     logAnalyticsWorkspaceResourceId: enableMonitoring ? logAnalyticsWorkspaceResourceId : ''
-    existingFoundryProjectResourceId: azureExistingAIProjectResourceId
     privateNetworking: enablePrivateNetworking
       ? {
           virtualNetworkResourceId: network.outputs.vnetResourceId
           subnetResourceId: network.outputs.subnetPrivateEndpointsResourceId
         }
       : null
+    existingFoundryProjectResourceId: azureExistingAIProjectResourceId
+    disableLocalAuth: true //Should be set to true for WAF aligned configuration
+    customSubDomainName: 'ais-${resourcesName}'
+    apiProperties: {
+      //staticsEnabled: false
+    }
+    allowProjectManagement: true
+    managedIdentities: {
+      systemAssigned: true
+    }
+    publicNetworkAccess: 'Enabled'
+    networkAcls: {
+      bypass: 'AzureServices'
+      defaultAction: 'Allow'
+    }
+    privateEndpoints: []
     roleAssignments: [
       {
         principalId: appIdentity.outputs.principalId

infra/modules/ai-foundry/main.bicep

@@ -303,13 +303,12 @@ resource cognitiveServiceExisting 'Microsoft.CognitiveServices/accounts@2025-04-
   name: existingCognitiveServiceDetails[8]
   scope: resourceGroup(existingCognitiveServiceDetails[2], existingCognitiveServiceDetails[4])
 }
-
 module cognitive_service_dependencies './dependencies.bicep' = if(!useExistingService) {
   name: take('${name}-cognitive-service-${cognitiveServiceNew.name}-dependencies', 64)
   params: {
     projectName: projectName
     projectDescription: projectDescription
-    name:  cognitiveServiceNew.name 
+    name: cognitiveServiceNew.name 
     location: location
     deployments: deployments
     diagnosticSettings: !empty(logAnalyticsWorkspaceResourceId)