diff --git a/quickstart/301-machine-learning-hub-spoke-secure/azure-firewall.tf b/quickstart/301-machine-learning-hub-spoke-secure/azure-firewall.tf
index fce14a95..d03f4ca5 100644
--- a/quickstart/301-machine-learning-hub-spoke-secure/azure-firewall.tf
+++ b/quickstart/301-machine-learning-hub-spoke-secure/azure-firewall.tf
@@ -3,7 +3,7 @@ resource "random_string" "fw_diag_prefix" {
   length  = 8
   upper   = false
   special = false
-  number  = false
+  numeric = false
 }
 resource "azurerm_ip_group" "ip_group_hub" {
   name                = "hub-ipgroup"
@@ -107,6 +107,11 @@ resource "azurerm_monitor_diagnostic_setting" "azure_firewall_instance" {
     }
   }
 
+  lifecycle {
+    ignore_changes = [
+      log
+    ]
+  }
 }
 
 resource "azurerm_firewall_policy_rule_collection_group" "azure_firewall_rules_collection" {
diff --git a/quickstart/301-machine-learning-hub-spoke-secure/dsvm.tf b/quickstart/301-machine-learning-hub-spoke-secure/dsvm.tf
index a821de08..8c08d8a6 100644
--- a/quickstart/301-machine-learning-hub-spoke-secure/dsvm.tf
+++ b/quickstart/301-machine-learning-hub-spoke-secure/dsvm.tf
@@ -49,9 +49,15 @@ resource "azurerm_windows_virtual_machine" "dsvm" {
   admin_password = local.dsvm_host_password
 
   provision_vm_agent = true
+  vm_agent_platform_updates_enabled = false
 
   timeouts {
     create = "60m"
     delete = "2h"
   }
+  lifecycle {
+    ignore_changes = [ 
+      vm_agent_platform_updates_enabled,
+    ]
+  }
 }