[AVM Module Issue]: Basic SKU VPN gateway fails deployment

[chrisred]

Check for previous/existing GitHub issues

• I have checked for previous/existing GitHub issues

Issue Type?

Bug

Module Name

avm/res/network/virtual-network-gateway

(Optional) Module Version

0.11.1

Description

A Basic SKU VPN gateway fails deployment with:

    "details": [
      {
        "code": "PublicIpWithBasicSkuNotAllowedOnVPNGatewaysBasicSku",
        "message": "Basic SKU VPN Gateway is not allowed with Basic IP Address. Please use Standard IP with Basic SKU VPN GW. Follow the link for more details : https://go.microsoft.com/fwlink/p/?linkid=2241350 /subscriptions/000-000-000-000-000/resourceGroups/rg-hub-networking-uksouth/providers/Microsoft.Network/virtualNetworkGateways/vgw-hub-uksouth",
        "details": []
      }

This was fixed here: #1435
Then regressed here: #1722

The offending line looks to be:

skuName: skuName == 'Basic' ? 'Basic' : 'Standard'

https://github.com/Azure/bicep-registry-modules/blob/main/avm/res/network/virtual-network-gateway/main.bicep#L546C16-L546C57

Basic SKU IPs have been retired, so the skuName for the public IP should be Standard in all cases i think.

https://azure.microsoft.com/en-gb/updates?id=upgrade-to-standard-sku-public-ip-addresses-in-azure-by-30-september-2025-basic-sku-will-be-retired

(Optional) Correlation Id

No response

[microsoft-github-policy-service]

Important

The "Needs: Triage 🔍" label must be removed once the triage process is complete!

Tip

For additional guidance on how to triage this issue/PR, see the BRM Issue Triage documentation.

[avm-organizer]

@chrisred, thanks for submitting this issue for the avm/res/network/virtual-network-gateway module!

Important

A member of the @Azure/avm-res-network-virtualnetworkgateway-module-owners-bicep team will review it soon!

[microsoft-github-policy-service]

Warning

Tagging the AVM Core Team (@Azure/avm-core-team-technical-bicep) due to a module owner or contributor having not responded to this issue within 3 business days. The AVM Core Team will attempt to contact the module owners/contributors directly.

Tip

• To prevent further actions to take effect, the "Status: Response Overdue 🚩" label must be removed, once this issue has been responded to.
• To avoid this rule being (re)triggered, the ""Needs: Triage 🔍" label must be removed as part of the triage process (when the issue is first responded to)!