diff --git a/.github/linters/.arm-ttk.psd1 b/.github/linters/.arm-ttk.psd1
index 04d221c6..4aaae683 100644
--- a/.github/linters/.arm-ttk.psd1
+++ b/.github/linters/.arm-ttk.psd1
@@ -10,5 +10,7 @@
         'IDs Should Be Derived From ResourceIDs'
         'Parameters Must Be Referenced'
         'Variables Must Be Referenced'
+        'apiVersions Should Be Recent'
+        'apiVersions Should Be Recent In Reference Functions'
     )
 }
diff --git a/infra/main.json b/infra/main.json
index d41e25cd..31130e8c 100644
--- a/infra/main.json
+++ b/infra/main.json
@@ -5,7 +5,7 @@
     "_generator": {
       "name": "bicep",
       "version": "0.4.1124.51302",
-      "templateHash": "12904071157118301552"
+      "templateHash": "5205541231650286521"
     }
   },
   "parameters": {
@@ -2288,7 +2288,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.4.1124.51302",
-              "templateHash": "17451550666935843444"
+              "templateHash": "8524388414033025523"
             }
           },
           "parameters": {
@@ -2737,7 +2737,7 @@
                     "_generator": {
                       "name": "bicep",
                       "version": "0.4.1124.51302",
-                      "templateHash": "12660131753967436973"
+                      "templateHash": "9522336369044592370"
                     }
                   },
                   "parameters": {
@@ -2764,7 +2764,7 @@
                   "resources": [
                     {
                       "type": "Microsoft.KeyVault/vaults",
-                      "apiVersion": "2021-04-01-preview",
+                      "apiVersion": "2021-06-01-preview",
                       "name": "[parameters('keyvaultName')]",
                       "location": "[parameters('location')]",
                       "tags": "[parameters('tags')]",
@@ -2783,6 +2783,7 @@
                           "ipRules": [],
                           "virtualNetworkRules": []
                         },
+                        "publicNetworkAccess": "Disabled",
                         "sku": {
                           "family": "A",
                           "name": "standard"
@@ -3191,7 +3192,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.4.1124.51302",
-              "templateHash": "14201920356500171973"
+              "templateHash": "6420410304354563673"
             }
           },
           "parameters": {
@@ -3262,7 +3263,7 @@
                     "_generator": {
                       "name": "bicep",
                       "version": "0.4.1124.51302",
-                      "templateHash": "16240531194403531210"
+                      "templateHash": "13765916949238564881"
                     }
                   },
                   "parameters": {
@@ -3322,7 +3323,7 @@
                   "resources": [
                     {
                       "type": "Microsoft.Synapse/privateLinkHubs",
-                      "apiVersion": "2021-03-01",
+                      "apiVersion": "2021-06-01",
                       "name": "[variables('synapsePrivatelinkHubNameCleaned')]",
                       "location": "[if(contains(variables('synapsePrivatelinkHubRegions'), parameters('location')), parameters('location'), 'northeurope')]",
                       "tags": "[parameters('tags')]",
diff --git a/infra/modules/services/keyvault.bicep b/infra/modules/services/keyvault.bicep
index 0b60ed95..88e18001 100644
--- a/infra/modules/services/keyvault.bicep
+++ b/infra/modules/services/keyvault.bicep
@@ -15,7 +15,7 @@ param privateDnsZoneIdKeyVault string = ''
 var keyVaultPrivateEndpointName = '${keyVault.name}-private-endpoint'
 
 // Resources
-resource keyVault 'Microsoft.KeyVault/vaults@2021-04-01-preview' = {
+resource keyVault 'Microsoft.KeyVault/vaults@2021-06-01-preview' = {
   name: keyvaultName
   location: location
   tags: tags
@@ -34,6 +34,7 @@ resource keyVault 'Microsoft.KeyVault/vaults@2021-04-01-preview' = {
       ipRules: []
       virtualNetworkRules: []
     }
+    publicNetworkAccess: 'Disabled'
     sku: {
       family: 'A'
       name: 'standard'
diff --git a/infra/modules/services/synapseprivatelinkhub.bicep b/infra/modules/services/synapseprivatelinkhub.bicep
index 42e9c950..8f5225e3 100644
--- a/infra/modules/services/synapseprivatelinkhub.bicep
+++ b/infra/modules/services/synapseprivatelinkhub.bicep
@@ -49,7 +49,7 @@ var synapsePrivatelinkHubRegions = [
 ]
 
 // Resources
-resource synapsePrivatelinkHub 'Microsoft.Synapse/privateLinkHubs@2021-03-01' = {
+resource synapsePrivatelinkHub 'Microsoft.Synapse/privateLinkHubs@2021-06-01' = {
   name: synapsePrivatelinkHubNameCleaned
   location: contains(synapsePrivatelinkHubRegions, location) ? location : 'northeurope'
   tags: tags