Public IP address in Azure have 2 SKUs:

1. Standard
2. Basic (will be retired in 2025)

Standard SKU is secure by default, does not allow any inbound traffic.
Basic allows traffic by default. NSGs can be used to control access.

If we do not specify SKU, Public IP takes Basic SKU.

Faced this issue when doing the exercise for network routing.

Bicep

Name	Description	Value
name	Name of a public IP address SKU.	‘Basic’ ‘Standard’
tier	Tier of a public IP address SKU.	‘Global’ ‘Regional’

sku: { name: 'string' tier: 'string' }

Create public ip address in Azure

---

references:

MS Docs Bicep docs