childresources-nested.json

{
    // https://github.com/neilpeterson/arm-template-collection/blob/master/3-other/resource-id-child-resources/azuredeploy-nested.json
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
    },
    "functions": [
    ],
    "variables": {
    },
    "resources": [
        {
            "name": "networkSecurityGroup1",
            "type": "Microsoft.Network/networkSecurityGroups",
            "apiVersion": "2019-11-01",
            "location": "[resourceGroup().location]",
            "properties": {
            },
            "resources": [
                {
                    "name": "networkSecurityGroupRuleName",
                    "type": "securityRules",
                    "apiVersion": "2019-11-01",
                    "dependson": [
                        "[resourceId('Microsoft.Network/networkSecurityGroups', 'networkSecurityGroup1')]"
                    ],
                    "properties": {
                        "description": "nsgRuleDescription",
                        "protocol": "*",
                        "sourcePortRange": "*",
                        "destinationPortRange": "*",
                        "sourceAddressPrefix": "*",
                        "destinationAddressPrefix": "*",
                        "access": "Allow",
                        "priority": 100,
                        "direction": "Inbound"
                    }
                }
            ]
        }
    ],
    "outputs": {
        "ruleResourceId": {
            "type": "string",
            "value": "[resourceId('Microsoft.Network/networkSecurityGroups/securityRules', 'networkSecurityGroup1', 'networkSecurityGroupRuleName')]"
        },
        // This does not work
        "ruleResourceId2": {
            "type": "string",
            "value": "[resourceId('Microsoft.Network/networkSecurityGroups/securityRules', 'networkSecurityGroupRuleName')]"
        }
    }
}