feat: avm/ptn/ai-platform/baseline New module

[cecheta]

Description

This is v0.1.0 of the new avm/ptn/ai-platform/baseline pattern: Azure/Azure-Verified-Modules#1150

• Creates AI hub workspace, with accompanying resources
• Allows creation of compute resources

Upcoming in later versions:

• Create VNet
• Create Azure bastion + VM
• Create private endpoints from VNet to resources
• Create connections in AI hub

Note that there appears to be a bug when trying to create an AI project via ARM when the managed VNet is enabled, therefore it is not currently created by the pattern. Managed network cannot be disabled once enabled.

Pipeline Reference

Pipeline

Type of Change

• Update to CI Environment or utilities (Non-module affecting changes)
• Azure Verified Module updates:
  • Bugfix containing backwards-compatible bug fixes, and I have NOT bumped the MAJOR or MINOR version in version.json:
    • Someone has opened a bug report issue, and I have included "Closes #{bug_report_issue_number}" in the PR description.
    • The bug was found by the module author, and no one has opened an issue to report it yet.
  • Feature update backwards compatible feature updates, and I have bumped the MINOR version in version.json.
  • Breaking changes and I have bumped the MAJOR version in version.json.
  • Update to documentation

Checklist

• I'm sure there are no other open Pull Requests for the same update/change
• I have run Set-AVMModule locally to generate the supporting module files.
• My corresponding pipelines / checks run clean and green without any errors or warnings

[cecheta]

Ready for review again

[Nepomuceno]

I think it would be good to make it closed by default including the storage account to be not externally accessible by defualt so they should be locked down including no internet access so this would also require you to create a vnet to put those in. The idea it is to use AVM modules instead of direct resources where possible.

[cecheta]

I think it would be good to make it closed by default including the storage account to be not externally accessible by defualt so they should be locked down including no internet access so this would also require you to create a vnet to put those in. The idea it is to use AVM modules instead of direct resources where possible.

The storage account is currently private by default and is created using an AVM module

I intend to add a VNet in a subsequent PR, for now AI studio can reach the storage account through its own managed VNet, where private endpoints are created automatically

[Nepomuceno]

LGTM

[ross-p-smith]

Great work Chinedum!