Skip to content

topic (iac): [secure-hybrid-network] update OS and VM SKU to modern Gen2#268

Open
ferantivero wants to merge 1 commit into
topic/421252_tighten-fw-rulesfrom
topic/421252_update-os-version
Open

topic (iac): [secure-hybrid-network] update OS and VM SKU to modern Gen2#268
ferantivero wants to merge 1 commit into
topic/421252_tighten-fw-rulesfrom
topic/421252_update-os-version

Conversation

@ferantivero
Copy link
Copy Markdown
Contributor

Why

Windows Server 2016 reached end of mainstream support. Standard_A4_v2 is a legacy SKU with poor price-performance.

What

  • Update OS from 2016-Datacenter to 2025-datacenter-core-smalldisk-g2
  • Update VM SKU from Standard_A4_v2 to Standard_D2s_v3

Test

  • Bicep compiles without errors

- Replace Standard_A4_v2 (Gen1-only) with Standard_D2s_v3 (Gen2-capable)
- VMSS (web tier): 2025-datacenter-core-smalldisk-g2 (Server Core for IIS)
- Mock on-prem VM: 2025-datacenter-smalldisk-g2 (full desktop for Bastion RDP)
- Smaller disk, faster boot, reduced attack surface on web tier

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant