diff --git a/azuredeploy.json b/azuredeploy.json
index 74689cd..951ba07 100644
--- a/azuredeploy.json
+++ b/azuredeploy.json
@@ -7,14 +7,22 @@
             "metadata": {
                 "description": "Existing VNET that have access to at least one Domain Controller"
             },
-            "defaultValue": "vnet-prod-spoke-workload"
+            "defaultValue": "vnet-prod-spoke-workload",
+            "allowedValues": [
+                "vnet-prod-spoke-workload",
+                "vnet-prod-dmz"
+            ]
         },
         "existingSubnetName": {
             "type": "string",
             "metadata": {
                 "description": "Existing subnet that have access to at least one Domain Controller"
             },
-            "defaultValue": "snet-prod-spoke-workload-default"
+            "defaultValue": "snet-prod-spoke-workload-default",
+            "allowedValues": [
+                "snet-prod-spoke-workload-default",
+                "snet-prod-dmz-default"
+            ]
         },
         "dnsLabelPrefix": {
             "type": "string",