Establish connection to a VNET via an ExpressRoute circuit

{"condition": "[equals(parameters('neworexistingnetwork'), "new')]", "type": "microsoft.network/virtualnetworks", "name": "[parameters('virtualnetworkname')]", "location": "[parameters('location')]", "tags": {"displayname": "virtualnetwork", "app": "[variables('redhattags').app]", "version": "[variables('redhattags').version]", "platform": "[variables('redhattags').platform]"}, "apiversion": "2019-09-01", "properties": {"addressspace": {"addressprefixes": "[parameters('virtualnetworkcidr')]"}, "subnets": [{"name": "[parameters('bastionsubnetname')]", "properties": {"addressprefix": "[parameters('bastionsubnetprefix')]", "networksecuritygroup": {"id": "[resourceid('microsoft.network/networksecuritygroups/", variables('bastionsecuritygroupname'))]"}}}, {"name": "[parameters('mastersubnetname')]", "properties": {"addressprefix": "[parameters('mastersubnetprefix')]", "networksecuritygroup": {"id": "[resourceid('microsoft.network/networksecuritygroups/", variables('mastersecuritygroupname'))]"}}}, {"name": "[parameters('workersubnetname')]", "properties": {"addressprefix": "[parameters('workersubnetprefix')]", "networksecuritygroup": {"id": "[resourceid('microsoft.network/networksecuritygroups/", variables('workersecuritygroupname'))]"}}}]}, "dependson": ["[variables('bastionsecuritygroupname')]", "[variables('mastersecuritygroupname')]", "[variables('workersecuritygroupname')]"]}{"type": "microsoft.network/publicipaddresses", "name": "[variables('bastionpublicipdnslabel')]", "location": "[parameters('location')]", "sku": {"name": "standard"}, "apiversion": "2019-09-01", "tags": {"displayname": "bastionpublicip", "app": "[variables('redhattags').app]", "version": "[variables('redhattags').version]", "platform": "[variables('redhattags').platform]"}, "properties": {"publicipallocationmethod": "static", "dnssettings": {"domainnamelabel": "[variables('bastionpublicipdnslabel')]"}}}{"type": "microsoft.network/networkinterfaces", "name": "[concat(variables('bastionhostname'), "-nic')]", "location": "[parameters('location')]", "apiversion": "2019-09-01", "tags": {"displayname": "bastionnetworkinterface", "app": "[variables('redhattags').app]", "version": "[variables('redhattags').version]", "platform": "[variables('redhattags').platform]"}, "dependson": ["[resourceid('microsoft.network/virtualnetworks/", parameters('virtualnetworkname'))]", "[resourceid('microsoft.network/networksecuritygroups/", variables('bastionsecuritygroupname'))]", "[resourceid('microsoft.network/publicipaddresses/", variables('bastionpublicipdnslabel'))]"], "properties": {"ipconfigurations": [{"name": "[concat(variables('bastionhostname'), "ipconfig')]", "properties": {"privateipallocationmethod": "dynamic", "subnet": {"id": "[resourceid(variables('networkresourcegroup'), "microsoft.network/virtualnetworks/subnets", parameters('virtualnetworkname'), parameters('bastionsubnetname'))]"}, "publicipaddress": {"id": "[resourceid('microsoft.network/publicipaddresses", variables('bastionpublicipdnslabel'))]"}}}], "networksecuritygroup": {"id": "[resourceid('microsoft.network/networksecuritygroups", variables('bastionsecuritygroupname'))]"}}}{"condition": "[equals(parameters('storageoption'), "nfs')]", "type": "microsoft.network/networkinterfaces", "name": "[concat(variables('nfshostname'), "-nic')]", "location": "[parameters('location')]", "apiversion": "2019-09-01", "tags": {"displayname": "nfsnetworkinterface", "app": "[variables('redhattags').app]", "version": "[variables('redhattags').version]", "platform": "[variables('redhattags').platform]"}, "dependson": ["[resourceid('microsoft.network/virtualnetworks/", parameters('virtualnetworkname'))]", "[resourceid('microsoft.network/networksecuritygroups/", variables('workersecuritygroupname'))]"], "properties": {"ipconfigurations": [{"name": "[concat(variables('nfshostname'), "ipconfig')]", "properties": {"privateipallocationmethod": "dynamic", "subnet": {"id": "[resourceid(variables('networkresourcegroup'), "microsoft.network/virtualnetworks/subnets", parameters('virtualnetworkname'), parameters('workersubnetname'))]"}}}], "networksecuritygroup": {"id": "[resourceid('microsoft.network/networksecuritygroups", variables('workersecuritygroupname'))]"}}}{"apiversion": "2019-09-01", "type": "microsoft.network/networksecuritygroups", "name": "[variables('bastionsecuritygroupname')]", "location": "[parameters('location')]", "tags": {"displayname": "bastionnsg", "app": "[variables('redhattags').app]", "version": "[variables('redhattags').version]", "platform": "[variables('redhattags').platform]"}, "properties": {"securityrules": [{"name": "allowsshin_all", "properties": {"description": "allow ssh in from all locations", "protocol": "tcp", "sourceportrange": "*", "destinationportrange": "22", "sourceaddressprefix": "*", "destinationaddressprefix": "*", "access": "allow", "priority": 100, "direction": "inbound"}}]}}{"apiversion": "2019-09-01", "type": "microsoft.network/networksecuritygroups", "name": "[variables('mastersecuritygroupname')]", "location": "[parameters('location')]", "tags": {"displayname": "masternsg", "app": "[variables('redhattags').app]", "version": "[variables('redhattags').version]", "platform": "[variables('redhattags').platform]"}, "properties": {"securityrules": [{"name": "allowhttps_all", "properties": {"description": "allow https connections from all locations", "protocol": "tcp", "sourceportrange": "*", "destinationportrange": "6443", "sourceaddressprefix": "*", "destinationaddressprefix": "*", "access": "allow", "priority": 200, "direction": "inbound"}}]}}{"apiversion": "2019-09-01", "type": "microsoft.network/networksecuritygroups", "name": "[variables('workersecuritygroupname')]", "location": "[parameters('location')]", "tags": {"displayname": "workernsg", "app": "[variables('redhattags').app]", "version": "[variables('redhattags').version]", "platform": "[variables('redhattags').platform]"}, "properties": {"securityrules": [{"name": "allowhttps_all", "properties": {"description": "allow https connections from all locations", "protocol": "tcp", "sourceportrange": "*", "destinationportrange": "443", "sourceaddressprefix": "*", "destinationaddressprefix": "*", "access": "allow", "priority": 200, "direction": "inbound"}}, {"name": "allowhttpin_all", "properties": {"description": "allow http connections from all locations", "protocol": "tcp", "sourceportrange": "*", "destinationportrange": "80", "sourceaddressprefix": "*", "destinationaddressprefix": "*", "access": "allow", "priority": 300, "direction": "inbound"}}]}}