Azure SQL managed instance deployed in broken state

[pchettri3]

Managed SQL instance gets deployed with error. Does bicep needs NSG and custom route even in an environment where there is a secured hub with vwan? why even deploy it instead of failing it before deployment ?

param location string
param resourceGroupName string
param administratorLogin string
https://github.com/secure()
param administratorLoginPassword string
param subnetId string
//param privateDnsZoneArmResourceId string
var serverName = replace(resourceGroupName, 'rg', 'sqlmi')
//var backupRetentionDays = contains(resourceGroupName, 'prd') ? 30 : 15

resource sqlManagedInstance 'Microsoft.Sql/managedInstances@2023-02-01-preview' = {
name: serverName
location: location
sku: {
name: 'GP_Gen5'
tier: 'GeneralPurpose'
family: 'Gen5'
capacity: 4
}
identity: {
type: 'SystemAssigned'
}
properties: {
isGeneralPurposeV2: false
administratorLogin: administratorLogin
administratorLoginPassword: administratorLoginPassword
subnetId: subnetId
licenseType: 'BasePrice'
hybridSecondaryUsage: 'Active'
vCores: 4
storageSizeInGB: 64
collation: 'SQL_Latin1_General_CP1_CI_AS'
publicDataEndpointEnabled: false
proxyOverride: 'Proxy'
timezoneId: 'US Mountain Standard Time'
minimalTlsVersion: '1.2'
requestedBackupStorageRedundancy: 'Local'
zoneRedundant: false
pricingModel: 'Regular'
}
}

error

, "message": "The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'.", "details": [ {
| "code": "DeploymentFailed", "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations
| for usage details.", "details": [ { "code": "NotFound", "message": "{\r\n "error": {\r\n "code": "ResourceNotFound",\r\n "message": "The
| specified resource does not exist. Follow this link for more information

Managed instance create operation failed or canceled. Please delete and recreate.