Azure SQL Server has no unrestricted firewall rule

# Replace any allow-all firewall rule with a restricted range
resource "azurerm_mssql_firewall_rule" "<example_resource_name>" {
  name             = "<example_resource_name>"
  server_id        = "<example_resource_id>"
  start_ip_address = "<START_IP>" # Critical: not 0.0.0.0
  end_ip_address   = "<END_IP>"   # Critical: not 255.255.255.255
}

// Update the firewall rule to not allow the entire Internet
resource sqlServer 'Microsoft.Sql/servers@2021-11-01' existing = {
  name: '<example_resource_name>'
}

resource restricted 'Microsoft.Sql/servers/firewallRules@2021-11-01' = {
  name: '${sqlServer.name}/<example_resource_name>'
  properties: {
    startIpAddress: '<START_IP>' // Critical: not 0.0.0.0; restricts start IP
    endIpAddress: '<END_IP>'     // Critical: not 255.255.255.255; restricts end IP
  }
}