diff --git a/infra/app/apim-api.bicep b/infra/app/apim-api.bicep
index 44b4d980..58a4c0b7 100644
--- a/infra/app/apim-api.bicep
+++ b/infra/app/apim-api.bicep
@@ -25,7 +25,7 @@ param apiBackendUrl string
 
 var apiPolicyContent = replace(loadTextContent('apim-api-policy.xml'), '{origin}', webFrontendUrl)
 
-resource restApi 'Microsoft.ApiManagement/service/apis@2021-12-01-preview' = {
+resource restApi 'Microsoft.ApiManagement/service/apis@2023-05-01-preview' = {
   name: apiName
   parent: apimService
   properties: {
@@ -41,7 +41,7 @@ resource restApi 'Microsoft.ApiManagement/service/apis@2021-12-01-preview' = {
   }
 }
 
-resource apiPolicy 'Microsoft.ApiManagement/service/apis/policies@2021-12-01-preview' = {
+resource apiPolicy 'Microsoft.ApiManagement/service/apis/policies@2023-05-01-preview' = {
   name: 'policy'
   parent: restApi
   properties: {
@@ -50,7 +50,7 @@ resource apiPolicy 'Microsoft.ApiManagement/service/apis/policies@2021-12-01-pre
   }
 }
 
-resource apiDiagnostics 'Microsoft.ApiManagement/service/apis/diagnostics@2021-12-01-preview' = {
+resource apiDiagnostics 'Microsoft.ApiManagement/service/apis/diagnostics@2023-05-01-preview' = {
   name: 'applicationinsights'
   parent: restApi
   properties: {
@@ -91,7 +91,7 @@ resource apiDiagnostics 'Microsoft.ApiManagement/service/apis/diagnostics@2021-1
   }
 }
 
-resource apimProduct 'Microsoft.ApiManagement/service/products@2022-08-01' = {
+resource apimProduct 'Microsoft.ApiManagement/service/products@2023-05-01-preview' = {
   name: 'apim-api-product'
   parent: apimService
   properties: {
@@ -104,11 +104,11 @@ resource apimProduct 'Microsoft.ApiManagement/service/products@2022-08-01' = {
   }
 }
 
-resource apimService 'Microsoft.ApiManagement/service@2021-08-01' existing = {
+resource apimService 'Microsoft.ApiManagement/service@2023-05-01-preview' existing = {
   name: name
 }
 
-resource apimLogger 'Microsoft.ApiManagement/service/loggers@2021-12-01-preview' existing = {
+resource apimLogger 'Microsoft.ApiManagement/service/loggers@2023-05-01-preview' existing = {
   name: 'app-insights-logger'
   parent: apimService
 }
diff --git a/infra/app/apim-stripe.bicep b/infra/app/apim-stripe.bicep
index 0bb7e41b..c432b34b 100644
--- a/infra/app/apim-stripe.bicep
+++ b/infra/app/apim-stripe.bicep
@@ -25,7 +25,7 @@ param apiBackendUrl string
 
 var apiPolicyContent = replace(loadTextContent('apim-api-policy.xml'), '{origin}', webFrontendUrl)
 
-resource restApi 'Microsoft.ApiManagement/service/apis@2021-12-01-preview' = {
+resource restApi 'Microsoft.ApiManagement/service/apis@2023-05-01-preview' = {
   name: apiName
   parent: apimService
   properties: {
@@ -41,7 +41,7 @@ resource restApi 'Microsoft.ApiManagement/service/apis@2021-12-01-preview' = {
   }
 }
 
-resource apiPolicy 'Microsoft.ApiManagement/service/apis/policies@2021-12-01-preview' = {
+resource apiPolicy 'Microsoft.ApiManagement/service/apis/policies@2023-05-01-preview' = {
   name: 'policy'
   parent: restApi
   properties: {
@@ -50,7 +50,7 @@ resource apiPolicy 'Microsoft.ApiManagement/service/apis/policies@2021-12-01-pre
   }
 }
 
-resource apiDiagnostics 'Microsoft.ApiManagement/service/apis/diagnostics@2021-12-01-preview' = {
+resource apiDiagnostics 'Microsoft.ApiManagement/service/apis/diagnostics@2023-05-01-preview' = {
   name: 'applicationinsights'
   parent: restApi
   properties: {
@@ -91,7 +91,7 @@ resource apiDiagnostics 'Microsoft.ApiManagement/service/apis/diagnostics@2021-1
   }
 }
 
-resource apimProduct 'Microsoft.ApiManagement/service/products@2022-08-01' = {
+resource apimProduct 'Microsoft.ApiManagement/service/products@2023-05-01-preview' = {
   name: 'apim-product'
   parent: apimService
   properties: {
@@ -102,11 +102,11 @@ resource apimProduct 'Microsoft.ApiManagement/service/products@2022-08-01' = {
   }
 }
 
-resource apimService 'Microsoft.ApiManagement/service@2021-08-01' existing = {
+resource apimService 'Microsoft.ApiManagement/service@2023-05-01-preview' existing = {
   name: name
 }
 
-resource apimLogger 'Microsoft.ApiManagement/service/loggers@2021-12-01-preview' existing = {
+resource apimLogger 'Microsoft.ApiManagement/service/loggers@2023-05-01-preview' existing = {
   name: 'app-insights-logger'
   parent: apimService
 }
diff --git a/infra/app/blog.bicep b/infra/app/blog.bicep
index 11f12d9a..3bdd9b7a 100644
--- a/infra/app/blog.bicep
+++ b/infra/app/blog.bicep
@@ -52,7 +52,7 @@ resource applicationInsights 'Microsoft.Insights/components@2020-02-02' existing
   name: applicationInsightsName
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
 
diff --git a/infra/app/cms.bicep b/infra/app/cms.bicep
index 18661f84..78f91f2c 100644
--- a/infra/app/cms.bicep
+++ b/infra/app/cms.bicep
@@ -140,11 +140,11 @@ resource applicationInsights 'Microsoft.Insights/components@2020-02-02' existing
   name: applicationInsightsName
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-11-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
 
-resource storageAccount 'Microsoft.Storage/storageAccounts@2022-09-01' existing = {
+resource storageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' existing = {
   name: storageAccountName
 }
 
diff --git a/infra/app/events.bicep b/infra/app/events.bicep
index 4a295a60..904da1aa 100644
--- a/infra/app/events.bicep
+++ b/infra/app/events.bicep
@@ -16,6 +16,6 @@ module events '../core/pubsub/event-grid.bicep' = {
   }
 }
 
-resource storageAccount 'Microsoft.Storage/storageAccounts@2022-09-01' existing = {
+resource storageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' existing = {
   name: storageAccountName
 }
diff --git a/infra/app/notifications-backend.bicep b/infra/app/notifications-backend.bicep
index dd2244f5..d88107f7 100644
--- a/infra/app/notifications-backend.bicep
+++ b/infra/app/notifications-backend.bicep
@@ -56,11 +56,11 @@ resource applicationInsights 'Microsoft.Insights/components@2020-02-02' existing
   name: applicationInsightsName
 }
 
-resource awps 'Microsoft.SignalRService/webPubSub@2023-02-01' existing = {
+resource awps 'Microsoft.SignalRService/webPubSub@2023-08-01-preview' existing = {
   name: notificationsServiceName
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
 
diff --git a/infra/app/portal-backend.bicep b/infra/app/portal-backend.bicep
index ec498c3b..de422f73 100644
--- a/infra/app/portal-backend.bicep
+++ b/infra/app/portal-backend.bicep
@@ -5,7 +5,7 @@ param useAPIM bool
 param portalName string
 param apiServiceName string
 
-resource portalApimProperties 'Microsoft.Web/staticSites/linkedBackends@2022-03-01' = {
+resource portalApimProperties 'Microsoft.Web/staticSites/linkedBackends@2022-09-01' = {
   parent: portal
   name: name
 
@@ -20,11 +20,11 @@ resource portalApimProperties 'Microsoft.Web/staticSites/linkedBackends@2022-03-
   }
 }
 
-resource portal 'Microsoft.Web/staticSites@2022-03-01' existing = {
+resource portal 'Microsoft.Web/staticSites@2022-09-01' existing = {
   name: portalName
 }
 
-resource apimService 'Microsoft.ApiManagement/service@2021-08-01' existing = {
+resource apimService 'Microsoft.ApiManagement/service@2023-05-01-preview' existing = {
   name: name
 }
 
diff --git a/infra/core/database/cosmos/cosmos-account.bicep b/infra/core/database/cosmos/cosmos-account.bicep
index 343c2f0f..2e515722 100644
--- a/infra/core/database/cosmos/cosmos-account.bicep
+++ b/infra/core/database/cosmos/cosmos-account.bicep
@@ -8,7 +8,7 @@ param keyVaultName string
 @allowed([ 'GlobalDocumentDB', 'MongoDB', 'Parse' ])
 param kind string
 
-resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2022-08-15' = {
+resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2024-05-15' = {
   name: name
   kind: kind
   location: location
@@ -30,7 +30,7 @@ resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2022-08-15' = {
   }
 }
 
-resource cosmosConnectionString 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
+resource cosmosConnectionString 'Microsoft.KeyVault/vaults/secrets@2023-07-01' = {
   parent: keyVault
   name: connectionStringKey
   properties: {
@@ -38,7 +38,7 @@ resource cosmosConnectionString 'Microsoft.KeyVault/vaults/secrets@2022-07-01' =
   }
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
 
diff --git a/infra/core/database/cosmos/mongo/cosmos-mongo-db.bicep b/infra/core/database/cosmos/mongo/cosmos-mongo-db.bicep
index f3b4ab52..e692fc7a 100644
--- a/infra/core/database/cosmos/mongo/cosmos-mongo-db.bicep
+++ b/infra/core/database/cosmos/mongo/cosmos-mongo-db.bicep
@@ -18,7 +18,7 @@ module cosmos 'cosmos-mongo-account.bicep' = {
   }
 }
 
-resource database 'Microsoft.DocumentDB/databaseAccounts/mongodbDatabases@2022-08-15' = {
+resource database 'Microsoft.DocumentDB/databaseAccounts/mongodbDatabases@2024-05-15' = {
   name: '${accountName}/${databaseName}'
   tags: tags
   properties: {
diff --git a/infra/core/database/cosmos/sql/cosmos-sql-account.bicep b/infra/core/database/cosmos/sql/cosmos-sql-account.bicep
index e8b030f6..cd460275 100644
--- a/infra/core/database/cosmos/sql/cosmos-sql-account.bicep
+++ b/infra/core/database/cosmos/sql/cosmos-sql-account.bicep
@@ -12,6 +12,7 @@ module cosmos '../../cosmos/cosmos-account.bicep' = {
     tags: tags
     keyVaultName: keyVaultName
     kind: 'GlobalDocumentDB'
+    connectionStringKey: ''
   }
 }
 
diff --git a/infra/core/database/cosmos/sql/cosmos-sql-db.bicep b/infra/core/database/cosmos/sql/cosmos-sql-db.bicep
index 5a4de209..235c7436 100644
--- a/infra/core/database/cosmos/sql/cosmos-sql-db.bicep
+++ b/infra/core/database/cosmos/sql/cosmos-sql-db.bicep
@@ -17,7 +17,7 @@ module cosmos 'cosmos-sql-account.bicep' = {
   }
 }
 
-resource database 'Microsoft.DocumentDB/databaseAccounts/sqlDatabases@2022-05-15' = {
+resource database 'Microsoft.DocumentDB/databaseAccounts/sqlDatabases@2024-05-15' = {
   name: '${accountName}/${databaseName}'
   properties: {
     resource: { id: databaseName }
diff --git a/infra/core/database/cosmos/sql/cosmos-sql-role-assign.bicep b/infra/core/database/cosmos/sql/cosmos-sql-role-assign.bicep
index 6855edfe..f5dc40aa 100644
--- a/infra/core/database/cosmos/sql/cosmos-sql-role-assign.bicep
+++ b/infra/core/database/cosmos/sql/cosmos-sql-role-assign.bicep
@@ -3,7 +3,7 @@ param accountName string
 param roleDefinitionId string
 param principalId string = ''
 
-resource role 'Microsoft.DocumentDB/databaseAccounts/sqlRoleAssignments@2022-05-15' = {
+resource role 'Microsoft.DocumentDB/databaseAccounts/sqlRoleAssignments@2024-05-15' = {
   parent: cosmos
   name: guid(roleDefinitionId, principalId, cosmos.id)
   properties: {
@@ -13,6 +13,6 @@ resource role 'Microsoft.DocumentDB/databaseAccounts/sqlRoleAssignments@2022-05-
   }
 }
 
-resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2022-08-15' existing = {
+resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2024-05-15' existing = {
   name: accountName
 }
diff --git a/infra/core/database/cosmos/sql/cosmos-sql-role-def.bicep b/infra/core/database/cosmos/sql/cosmos-sql-role-def.bicep
index cfb40335..af9ff280 100644
--- a/infra/core/database/cosmos/sql/cosmos-sql-role-def.bicep
+++ b/infra/core/database/cosmos/sql/cosmos-sql-role-def.bicep
@@ -1,6 +1,6 @@
 param accountName string
 
-resource roleDefinition 'Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions@2022-08-15' = {
+resource roleDefinition 'Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions@2024-05-15' = {
   parent: cosmos
   name: guid(cosmos.id, accountName, 'sql-role')
   properties: {
@@ -22,7 +22,7 @@ resource roleDefinition 'Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinition
   }
 }
 
-resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2022-08-15' existing = {
+resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2024-05-15' existing = {
   name: accountName
 }
 
diff --git a/infra/core/database/postgresql/flexibleserver.bicep b/infra/core/database/postgresql/flexibleserver.bicep
index ef11cedf..ed9fdb39 100644
--- a/infra/core/database/postgresql/flexibleserver.bicep
+++ b/infra/core/database/postgresql/flexibleserver.bicep
@@ -18,7 +18,7 @@ param keyVaultName string
 param version string
 
 // Latest official version 2022-12-01 does not have Bicep types available
-resource postgresServer 'Microsoft.DBforPostgreSQL/flexibleServers@2022-12-01' = {
+resource postgresServer 'Microsoft.DBforPostgreSQL/flexibleServers@2023-03-01-preview' = {
   location: location
   tags: tags
   name: name
@@ -63,7 +63,7 @@ resource postgresServer 'Microsoft.DBforPostgreSQL/flexibleServers@2022-12-01' =
 
 }
 
-resource postgresPassword 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
+resource postgresPassword 'Microsoft.KeyVault/vaults/secrets@2023-07-01' = {
   parent: keyVault
   name: administratorLoginPasswordKey
   properties: {
@@ -71,7 +71,7 @@ resource postgresPassword 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
   }
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
 
diff --git a/infra/core/database/sqlserver/sqlserver.bicep b/infra/core/database/sqlserver/sqlserver.bicep
index 2cace515..93a4f0f4 100644
--- a/infra/core/database/sqlserver/sqlserver.bicep
+++ b/infra/core/database/sqlserver/sqlserver.bicep
@@ -13,7 +13,7 @@ param sqlAdminPassword string
 @secure()
 param appUserPassword string
 
-resource sqlServer 'Microsoft.Sql/servers@2022-05-01-preview' = {
+resource sqlServer 'Microsoft.Sql/servers@2023-05-01-preview' = {
   name: name
   location: location
   tags: tags
@@ -42,7 +42,7 @@ resource sqlServer 'Microsoft.Sql/servers@2022-05-01-preview' = {
   }
 }
 
-resource sqlDeploymentScript 'Microsoft.Resources/deploymentScripts@2020-10-01' = {
+resource sqlDeploymentScript 'Microsoft.Resources/deploymentScripts@2023-08-01' = {
   name: '${name}-deployment-script'
   location: location
   kind: 'AzureCLI'
@@ -96,7 +96,7 @@ SCRIPT_END
   }
 }
 
-resource sqlAdminPasswordSecret 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
+resource sqlAdminPasswordSecret 'Microsoft.KeyVault/vaults/secrets@2023-07-01' = {
   parent: keyVault
   name: 'sqlAdminPassword'
   properties: {
@@ -104,7 +104,7 @@ resource sqlAdminPasswordSecret 'Microsoft.KeyVault/vaults/secrets@2022-07-01' =
   }
 }
 
-resource appUserPasswordSecret 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
+resource appUserPasswordSecret 'Microsoft.KeyVault/vaults/secrets@2023-07-01' = {
   parent: keyVault
   name: 'appUserPassword'
   properties: {
@@ -112,7 +112,7 @@ resource appUserPasswordSecret 'Microsoft.KeyVault/vaults/secrets@2022-07-01' =
   }
 }
 
-resource sqlAzureConnectionStringSercret 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
+resource sqlAzureConnectionStringSercret 'Microsoft.KeyVault/vaults/secrets@2023-07-01' = {
   parent: keyVault
   name: connectionStringKey
   properties: {
@@ -120,7 +120,7 @@ resource sqlAzureConnectionStringSercret 'Microsoft.KeyVault/vaults/secrets@2022
   }
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
 
diff --git a/infra/core/gateway/apim.bicep b/infra/core/gateway/apim.bicep
index 64c958cd..4242e368 100644
--- a/infra/core/gateway/apim.bicep
+++ b/infra/core/gateway/apim.bicep
@@ -57,7 +57,7 @@ resource apimService 'Microsoft.ApiManagement/service@2021-08-01' = {
   }
 }
 
-resource apimLogger 'Microsoft.ApiManagement/service/loggers@2021-12-01-preview' = if (!empty(applicationInsightsName)) {
+resource apimLogger 'Microsoft.ApiManagement/service/loggers@2023-05-01-preview' = if (!empty(applicationInsightsName)) {
   name: 'app-insights-logger'
   parent: apimService
   properties: {
diff --git a/infra/core/host/aks-agent-pool.bicep b/infra/core/host/aks-agent-pool.bicep
index 56c7a324..6d717348 100644
--- a/infra/core/host/aks-agent-pool.bicep
+++ b/infra/core/host/aks-agent-pool.bicep
@@ -6,11 +6,11 @@ param name string
 @description('The agent pool configuration')
 param config object
 
-resource aksCluster 'Microsoft.ContainerService/managedClusters@2022-11-02-preview' existing = {
+resource aksCluster 'Microsoft.ContainerService/managedClusters@2024-03-02-preview' existing = {
   name: clusterName
 }
 
-resource nodePool 'Microsoft.ContainerService/managedClusters/agentPools@2022-11-02-preview' = {
+resource nodePool 'Microsoft.ContainerService/managedClusters/agentPools@2024-03-02-preview' = {
   parent: aksCluster
   name: name
   properties: config
diff --git a/infra/core/host/aks.bicep b/infra/core/host/aks.bicep
index f2f42066..7d8560dc 100644
--- a/infra/core/host/aks.bicep
+++ b/infra/core/host/aks.bicep
@@ -89,7 +89,7 @@ var addOnsConfig = union(
 )
 
 // Link to existing log analytics workspace when available
-resource logAnalytics 'Microsoft.OperationalInsights/workspaces@2021-12-01-preview' existing = if (!empty(logAnalyticsName)) {
+resource logAnalytics 'Microsoft.OperationalInsights/workspaces@2022-10-01' existing = if (!empty(logAnalyticsName)) {
   name: logAnalyticsName
 }
 
diff --git a/infra/core/host/appservice.bicep b/infra/core/host/appservice.bicep
index c65f2b89..40b46e68 100644
--- a/infra/core/host/appservice.bicep
+++ b/infra/core/host/appservice.bicep
@@ -23,6 +23,7 @@ param kind string = 'app,linux'
 param allowedOrigins array = []
 param alwaysOn bool = true
 param appCommandLine string = ''
+@secure()
 param appSettings object = {}
 param clientAffinityEnabled bool = false
 param enableOryxBuild bool = contains(kind, 'linux')
@@ -35,7 +36,7 @@ param use32BitWorkerProcess bool = false
 param ftpsState string = 'FtpsOnly'
 param healthCheckPath string = ''
 
-resource appService 'Microsoft.Web/sites@2022-03-01' = {
+resource appService 'Microsoft.Web/sites@2022-09-01' = {
   name: name
   location: location
   tags: tags
@@ -88,7 +89,7 @@ resource appService 'Microsoft.Web/sites@2022-03-01' = {
   }
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = if (!(empty(keyVaultName))) {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = if (!(empty(keyVaultName))) {
   name: keyVaultName
 }
 
diff --git a/infra/core/host/appserviceplan.bicep b/infra/core/host/appserviceplan.bicep
index 69c35d78..ec0c24cc 100644
--- a/infra/core/host/appserviceplan.bicep
+++ b/infra/core/host/appserviceplan.bicep
@@ -6,7 +6,7 @@ param kind string = ''
 param reserved bool = true
 param sku object
 
-resource appServicePlan 'Microsoft.Web/serverfarms@2022-03-01' = {
+resource appServicePlan 'Microsoft.Web/serverfarms@2022-09-01' = {
   name: name
   location: location
   tags: tags
diff --git a/infra/core/host/container-app.bicep b/infra/core/host/container-app.bicep
index 08dd7318..34efb1de 100644
--- a/infra/core/host/container-app.bicep
+++ b/infra/core/host/container-app.bicep
@@ -19,7 +19,7 @@ param containerCpuCoreCount string = '0.5'
 @description('Memory allocated to a single container instance, e.g. 1Gi')
 param containerMemory string = '1.0Gi'
 
-resource app 'Microsoft.App/containerApps@2022-03-01' = {
+resource app 'Microsoft.App/containerApps@2023-11-02-preview' = {
   name: name
   location: location
   tags: tags
@@ -70,12 +70,12 @@ resource app 'Microsoft.App/containerApps@2022-03-01' = {
   ]
 }
 
-resource containerAppsEnvironment 'Microsoft.App/managedEnvironments@2022-03-01' existing = {
+resource containerAppsEnvironment 'Microsoft.App/managedEnvironments@2023-11-02-preview' existing = {
   name: containerAppsEnvironmentName
 }
 
 // 2022-02-01-preview needed for anonymousPullEnabled
-resource containerRegistry 'Microsoft.ContainerRegistry/registries@2022-02-01-preview' existing = {
+resource containerRegistry 'Microsoft.ContainerRegistry/registries@2023-01-01-preview' existing = {
   name: containerRegistryName
 }
 
diff --git a/infra/core/host/container-apps-environment.bicep b/infra/core/host/container-apps-environment.bicep
index 2dd858cb..6b31eff9 100644
--- a/infra/core/host/container-apps-environment.bicep
+++ b/infra/core/host/container-apps-environment.bicep
@@ -4,7 +4,7 @@ param tags object = {}
 
 param logAnalyticsWorkspaceName string
 
-resource containerAppsEnvironment 'Microsoft.App/managedEnvironments@2022-03-01' = {
+resource containerAppsEnvironment 'Microsoft.App/managedEnvironments@2023-11-02-preview' = {
   name: name
   location: location
   tags: tags
diff --git a/infra/core/host/container-registry.bicep b/infra/core/host/container-registry.bicep
index c0ba201b..dd0b668f 100644
--- a/infra/core/host/container-registry.bicep
+++ b/infra/core/host/container-registry.bicep
@@ -19,7 +19,7 @@ param zoneRedundancy string = 'Disabled'
 param workspaceId string = ''
 
 // 2022-02-01-preview needed for anonymousPullEnabled
-resource containerRegistry 'Microsoft.ContainerRegistry/registries@2022-02-01-preview' = {
+resource containerRegistry 'Microsoft.ContainerRegistry/registries@2023-01-01-preview' = {
   name: name
   location: location
   tags: tags
diff --git a/infra/core/host/functions.bicep b/infra/core/host/functions.bicep
index 23fa2ea7..eb5f7abc 100644
--- a/infra/core/host/functions.bicep
+++ b/infra/core/host/functions.bicep
@@ -82,7 +82,7 @@ module apiKeyVaultAccess '../security/keyvault-access.bicep' = {
   }
 }
 
-resource storage 'Microsoft.Storage/storageAccounts@2021-09-01' existing = {
+resource storage 'Microsoft.Storage/storageAccounts@2023-01-01' existing = {
   name: storageAccountName
 }
 
diff --git a/infra/core/host/staticwebapp.bicep b/infra/core/host/staticwebapp.bicep
index 21d987df..506a683e 100644
--- a/infra/core/host/staticwebapp.bicep
+++ b/infra/core/host/staticwebapp.bicep
@@ -7,7 +7,7 @@ param sku object = {
   tier: 'Free'
 }
 
-resource web 'Microsoft.Web/staticSites@2022-03-01' = {
+resource web 'Microsoft.Web/staticSites@2022-09-01' = {
   name: name
   location: location
   tags: tags
diff --git a/infra/core/monitor/loganalytics.bicep b/infra/core/monitor/loganalytics.bicep
index 770544cc..6ddc7b8f 100644
--- a/infra/core/monitor/loganalytics.bicep
+++ b/infra/core/monitor/loganalytics.bicep
@@ -2,7 +2,7 @@ param name string
 param location string = resourceGroup().location
 param tags object = {}
 
-resource logAnalytics 'Microsoft.OperationalInsights/workspaces@2021-12-01-preview' = {
+resource logAnalytics 'Microsoft.OperationalInsights/workspaces@2022-10-01' = {
   name: name
   location: location
   tags: tags
diff --git a/infra/core/pubsub/event-grid.bicep b/infra/core/pubsub/event-grid.bicep
index b331dcc3..70bac4d0 100644
--- a/infra/core/pubsub/event-grid.bicep
+++ b/infra/core/pubsub/event-grid.bicep
@@ -6,7 +6,7 @@ param endpoint string
 param tags object = {}
 param eventSubName string
 
-resource systemTopic 'Microsoft.EventGrid/systemTopics@2021-10-15-preview' = {
+resource systemTopic 'Microsoft.EventGrid/systemTopics@2023-12-15-preview' = {
   name: name
   location: location
   tags: tags
@@ -19,7 +19,7 @@ resource systemTopic 'Microsoft.EventGrid/systemTopics@2021-10-15-preview' = {
   }
 }
 
-resource eventSubscription 'Microsoft.EventGrid/systemTopics/eventSubscriptions@2022-06-15' = if (endpoint != '') {
+resource eventSubscription 'Microsoft.EventGrid/systemTopics/eventSubscriptions@2023-12-15-preview' = if (endpoint != '') {
   parent: systemTopic
   name: eventSubName
   properties: {
diff --git a/infra/core/pubsub/web-pub-sub.bicep b/infra/core/pubsub/web-pub-sub.bicep
index 43f5c562..a248edce 100644
--- a/infra/core/pubsub/web-pub-sub.bicep
+++ b/infra/core/pubsub/web-pub-sub.bicep
@@ -35,7 +35,7 @@ param sku string = 'Free_F1'
 param pricingTier string = 'Free'
 
 // Resource definition
-resource webpubsub 'Microsoft.SignalRService/webPubSub@2023-02-01' = {
+resource webpubsub 'Microsoft.SignalRService/webPubSub@2023-08-01-preview' = {
   name: name
   location: location
   tags: union(tags, { 'azd-service-name': name })
diff --git a/infra/core/security/keyvault-access.bicep b/infra/core/security/keyvault-access.bicep
index 96c9cf73..8ea36ea2 100644
--- a/infra/core/security/keyvault-access.bicep
+++ b/infra/core/security/keyvault-access.bicep
@@ -4,7 +4,7 @@ param keyVaultName string = ''
 param permissions object = { secrets: [ 'get', 'list' ] }
 param principalId string
 
-resource keyVaultAccessPolicies 'Microsoft.KeyVault/vaults/accessPolicies@2022-07-01' = {
+resource keyVaultAccessPolicies 'Microsoft.KeyVault/vaults/accessPolicies@2023-07-01' = {
   parent: keyVault
   name: name
   properties: {
@@ -16,6 +16,6 @@ resource keyVaultAccessPolicies 'Microsoft.KeyVault/vaults/accessPolicies@2022-0
   }
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
diff --git a/infra/core/security/keyvault-secret.bicep b/infra/core/security/keyvault-secret.bicep
index 5f786ce5..aeeaeb79 100644
--- a/infra/core/security/keyvault-secret.bicep
+++ b/infra/core/security/keyvault-secret.bicep
@@ -10,7 +10,7 @@ param enabled bool = true
 param exp int = 0
 param nbf int = 0
 
-resource keyVaultSecret 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
+resource keyVaultSecret 'Microsoft.KeyVault/vaults/secrets@2023-07-01' = {
   name: name
   tags: tags
   parent: keyVault
@@ -25,6 +25,6 @@ resource keyVaultSecret 'Microsoft.KeyVault/vaults/secrets@2022-07-01' = {
   }
 }
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   name: keyVaultName
 }
diff --git a/infra/core/security/keyvault.bicep b/infra/core/security/keyvault.bicep
index 0eb4a86d..b0c2d8cf 100644
--- a/infra/core/security/keyvault.bicep
+++ b/infra/core/security/keyvault.bicep
@@ -4,7 +4,7 @@ param tags object = {}
 
 param principalId string = ''
 
-resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' = {
+resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' = {
   name: name
   location: location
   tags: tags
diff --git a/infra/core/security/registry-access.bicep b/infra/core/security/registry-access.bicep
index 056bd6c3..cac1855f 100644
--- a/infra/core/security/registry-access.bicep
+++ b/infra/core/security/registry-access.bicep
@@ -13,6 +13,6 @@ resource aksAcrPull 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
   }
 }
 
-resource containerRegistry 'Microsoft.ContainerRegistry/registries@2022-02-01-preview' existing = {
+resource containerRegistry 'Microsoft.ContainerRegistry/registries@2023-01-01-preview' existing = {
   name: containerRegistryName
 }
diff --git a/infra/core/storage/storage-account.bicep b/infra/core/storage/storage-account.bicep
index a41972ce..0ed50f21 100644
--- a/infra/core/storage/storage-account.bicep
+++ b/infra/core/storage/storage-account.bicep
@@ -8,7 +8,7 @@ param kind string = 'StorageV2'
 param minimumTlsVersion string = 'TLS1_2'
 param sku object = { name: 'Standard_LRS' }
 
-resource storage 'Microsoft.Storage/storageAccounts@2022-05-01' = {
+resource storage 'Microsoft.Storage/storageAccounts@2023-01-01' = {
   name: name
   location: location
   tags: tags
diff --git a/infra/main.bicep b/infra/main.bicep
index c00989a7..871458a2 100644
--- a/infra/main.bicep
+++ b/infra/main.bicep
@@ -71,7 +71,7 @@ var abbrs = loadJsonContent('./abbreviations.json')
 var resourceToken = toLower(uniqueString(subscription().id, environmentName, location))
 var tags = { 'azd-env-name': environmentName }
 
-resource rg 'Microsoft.Resources/resourceGroups@2021-04-01' = {
+resource rg 'Microsoft.Resources/resourceGroups@2024-03-01' = {
   name: '${abbrs.resourcesResourceGroups}${environmentName}'
   location: location
   tags: tags