diff --git a/avm/res/cdn/profile/customdomain/main.bicep b/avm/res/cdn/profile/customdomain/main.bicep
index 6633912457..ed772b9f8f 100644
--- a/avm/res/cdn/profile/customdomain/main.bicep
+++ b/avm/res/cdn/profile/customdomain/main.bicep
@@ -40,7 +40,7 @@ param secretName string = ''
 resource profile 'Microsoft.Cdn/profiles@2023-05-01' existing = {
   name: profileName
 
-  resource secrect 'secrets@2023-05-01' existing = if (!empty(secretName)) {
+  resource secret 'secrets@2023-05-01' existing = if (!empty(secretName)) {
     name: secretName
   }
 }
@@ -66,7 +66,7 @@ resource customDomain 'Microsoft.Cdn/profiles/customDomains@2023-05-01' = {
       minimumTlsVersion: minimumTlsVersion
       secret: !(empty(secretName))
         ? {
-            id: profile::secrect.id
+            id: profile::secret.id
           }
         : null
     }
diff --git a/avm/res/cdn/profile/customdomain/main.json b/avm/res/cdn/profile/customdomain/main.json
index e01089b617..d27c7fd2d6 100644
--- a/avm/res/cdn/profile/customdomain/main.json
+++ b/avm/res/cdn/profile/customdomain/main.json
@@ -180,7 +180,7 @@
     }
   },
   "resources": {
-    "profile::secrect": {
+    "profile::secret": {
       "condition": "[not(empty(parameters('secretName')))]",
       "existing": true,
       "type": "Microsoft.Cdn/profiles/secrets",
@@ -244,4 +244,4 @@
       }
     }
   }
-}
\ No newline at end of file
+}
diff --git a/avm/res/cdn/profile/main.bicep b/avm/res/cdn/profile/main.bicep
index a7fc53c7dc..9af67429cb 100644
--- a/avm/res/cdn/profile/main.bicep
+++ b/avm/res/cdn/profile/main.bicep
@@ -276,7 +276,7 @@ module profile_ruleSets 'ruleset/main.bicep' = [
     params: {
       name: ruleSet.name
       profileName: profile.name
-      rules: ruleSet.rules
+      rules: ruleSet.?rules
     }
   }
 ]
diff --git a/avm/res/cdn/profile/main.json b/avm/res/cdn/profile/main.json
index 6f4275f270..fe76208a35 100644
--- a/avm/res/cdn/profile/main.json
+++ b/avm/res/cdn/profile/main.json
@@ -6,7 +6,7 @@
     "_generator": {
       "name": "bicep",
       "version": "0.33.13.18514",
-      "templateHash": "2568064534163012915"
+      "templateHash": "17701317715444968473"
     },
     "name": "CDN Profiles",
     "description": "This module deploys a CDN Profile."
@@ -1693,7 +1693,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.33.13.18514",
-              "templateHash": "6185880578813937844"
+              "templateHash": "14557033028846709449"
             },
             "name": "CDN Profiles Secret",
             "description": "This module deploys a CDN Profile Secret."
@@ -1702,7 +1702,7 @@
             "name": {
               "type": "string",
               "metadata": {
-                "description": "Required. The name of the secrect."
+                "description": "Required. The name of the secret."
               }
             },
             "profileName": {
@@ -1721,7 +1721,7 @@
                 "UrlSigningKey"
               ],
               "metadata": {
-                "description": "Optional. The type of the secrect."
+                "description": "Optional. The type of the secret."
               }
             },
             "secretSourceResourceId": {
@@ -1742,14 +1742,14 @@
               "type": "array",
               "defaultValue": [],
               "metadata": {
-                "description": "Optional. The subject alternative names of the secrect."
+                "description": "Optional. The subject alternative names of the secret."
               }
             },
             "useLatestVersion": {
               "type": "bool",
               "defaultValue": false,
               "metadata": {
-                "description": "Optional. Indicates whether to use the latest version of the secrect."
+                "description": "Optional. Indicates whether to use the latest version of the secret."
               }
             }
           },
@@ -1767,14 +1767,14 @@
             "name": {
               "type": "string",
               "metadata": {
-                "description": "The name of the secrect."
+                "description": "The name of the secret."
               },
               "value": "[parameters('name')]"
             },
             "resourceId": {
               "type": "string",
               "metadata": {
-                "description": "The resource ID of the secrect."
+                "description": "The resource ID of the secret."
               },
               "value": "[resourceId('Microsoft.Cdn/profiles/secrets', parameters('profileName'), parameters('name'))]"
             },
@@ -1842,7 +1842,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.33.13.18514",
-              "templateHash": "13058047826352389276"
+              "templateHash": "10369216656034565871"
             },
             "name": "CDN Profiles Custom Domains",
             "description": "This module deploys a CDN Profile Custom Domains."
@@ -2016,7 +2016,7 @@
             }
           },
           "resources": {
-            "profile::secrect": {
+            "profile::secret": {
               "condition": "[not(empty(parameters('secretName')))]",
               "existing": true,
               "type": "Microsoft.Cdn/profiles/secrets",
@@ -2764,7 +2764,7 @@
             "value": "[parameters('name')]"
           },
           "rules": {
-            "value": "[parameters('ruleSets')[copyIndex()].rules]"
+            "value": "[tryGet(parameters('ruleSets')[copyIndex()], 'rules')]"
           }
         },
         "template": {
@@ -4014,7 +4014,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.33.13.18514",
-              "templateHash": "9521724516599685420"
+              "templateHash": "6987560302604046970"
             },
             "name": "CDN Profiles Security Policy",
             "description": "This module deploys a CDN Profile Security Policy."
@@ -4110,14 +4110,14 @@
             "name": {
               "type": "string",
               "metadata": {
-                "description": "The name of the secrect."
+                "description": "The name of the secret."
               },
               "value": "[parameters('name')]"
             },
             "resourceId": {
               "type": "string",
               "metadata": {
-                "description": "The resource ID of the secrect."
+                "description": "The resource ID of the secret."
               },
               "value": "[resourceId('Microsoft.Cdn/profiles/securityPolicies', parameters('profileName'), parameters('name'))]"
             },
diff --git a/avm/res/cdn/profile/secret/README.md b/avm/res/cdn/profile/secret/README.md
index b3048b8a2a..1a509353c3 100644
--- a/avm/res/cdn/profile/secret/README.md
+++ b/avm/res/cdn/profile/secret/README.md
@@ -20,7 +20,7 @@ This module deploys a CDN Profile Secret.
 
 | Parameter | Type | Description |
 | :-- | :-- | :-- |
-| [`name`](#parameter-name) | string | The name of the secrect. |
+| [`name`](#parameter-name) | string | The name of the secret. |
 
 **Conditional parameters**
 
@@ -34,13 +34,13 @@ This module deploys a CDN Profile Secret.
 | Parameter | Type | Description |
 | :-- | :-- | :-- |
 | [`secretVersion`](#parameter-secretversion) | string | The version of the secret. |
-| [`subjectAlternativeNames`](#parameter-subjectalternativenames) | array | The subject alternative names of the secrect. |
-| [`type`](#parameter-type) | string | The type of the secrect. |
-| [`useLatestVersion`](#parameter-uselatestversion) | bool | Indicates whether to use the latest version of the secrect. |
+| [`subjectAlternativeNames`](#parameter-subjectalternativenames) | array | The subject alternative names of the secret. |
+| [`type`](#parameter-type) | string | The type of the secret. |
+| [`useLatestVersion`](#parameter-uselatestversion) | bool | Indicates whether to use the latest version of the secret. |
 
 ### Parameter: `name`
 
-The name of the secrect.
+The name of the secret.
 
 - Required: Yes
 - Type: string
@@ -70,7 +70,7 @@ The version of the secret.
 
 ### Parameter: `subjectAlternativeNames`
 
-The subject alternative names of the secrect.
+The subject alternative names of the secret.
 
 - Required: No
 - Type: array
@@ -78,7 +78,7 @@ The subject alternative names of the secrect.
 
 ### Parameter: `type`
 
-The type of the secrect.
+The type of the secret.
 
 - Required: No
 - Type: string
@@ -95,7 +95,7 @@ The type of the secrect.
 
 ### Parameter: `useLatestVersion`
 
-Indicates whether to use the latest version of the secrect.
+Indicates whether to use the latest version of the secret.
 
 - Required: No
 - Type: bool
@@ -105,6 +105,6 @@ Indicates whether to use the latest version of the secrect.
 
 | Output | Type | Description |
 | :-- | :-- | :-- |
-| `name` | string | The name of the secrect. |
+| `name` | string | The name of the secret. |
 | `resourceGroupName` | string | The name of the resource group the secret was created in. |
-| `resourceId` | string | The resource ID of the secrect. |
+| `resourceId` | string | The resource ID of the secret. |
diff --git a/avm/res/cdn/profile/secret/main.bicep b/avm/res/cdn/profile/secret/main.bicep
index e9c9eb7a67..9226638b10 100644
--- a/avm/res/cdn/profile/secret/main.bicep
+++ b/avm/res/cdn/profile/secret/main.bicep
@@ -1,7 +1,7 @@
 metadata name = 'CDN Profiles Secret'
 metadata description = 'This module deploys a CDN Profile Secret.'
 
-@description('Required. The name of the secrect.')
+@description('Required. The name of the secret.')
 param name string
 
 @description('Conditional. The name of the parent CDN profile. Required if the template is used in a standalone deployment.')
@@ -13,7 +13,7 @@ param profileName string
   'ManagedCertificate'
   'UrlSigningKey'
 ])
-@description('Optional. The type of the secrect.')
+@description('Optional. The type of the secret.')
 param type string = 'AzureFirstPartyManagedCertificate'
 
 @description('Conditional. The resource ID of the secret source. Required if the `type` is "CustomerCertificate".')
@@ -23,10 +23,10 @@ param secretSourceResourceId string = ''
 @description('Optional. The version of the secret.')
 param secretVersion string = ''
 
-@description('Optional. The subject alternative names of the secrect.')
+@description('Optional. The subject alternative names of the secret.')
 param subjectAlternativeNames array = []
 
-@description('Optional. Indicates whether to use the latest version of the secrect.')
+@description('Optional. Indicates whether to use the latest version of the secret.')
 param useLatestVersion bool = false
 
 resource profile 'Microsoft.Cdn/profiles@2023-05-01' existing = {
@@ -53,10 +53,10 @@ resource secret 'Microsoft.Cdn/profiles/secrets@2023-05-01' = {
   }
 }
 
-@description('The name of the secrect.')
+@description('The name of the secret.')
 output name string = secret.name
 
-@description('The resource ID of the secrect.')
+@description('The resource ID of the secret.')
 output resourceId string = secret.id
 
 @description('The name of the resource group the secret was created in.')
diff --git a/avm/res/cdn/profile/secret/main.json b/avm/res/cdn/profile/secret/main.json
index 15711095a9..be33cf223e 100644
--- a/avm/res/cdn/profile/secret/main.json
+++ b/avm/res/cdn/profile/secret/main.json
@@ -14,7 +14,7 @@
     "name": {
       "type": "string",
       "metadata": {
-        "description": "Required. The name of the secrect."
+        "description": "Required. The name of the secret."
       }
     },
     "profileName": {
@@ -33,7 +33,7 @@
         "UrlSigningKey"
       ],
       "metadata": {
-        "description": "Optional. The type of the secrect."
+        "description": "Optional. The type of the secret."
       }
     },
     "secretSourceResourceId": {
@@ -54,14 +54,14 @@
       "type": "array",
       "defaultValue": [],
       "metadata": {
-        "description": "Optional. The subject alternative names of the secrect."
+        "description": "Optional. The subject alternative names of the secret."
       }
     },
     "useLatestVersion": {
       "type": "bool",
       "defaultValue": false,
       "metadata": {
-        "description": "Optional. Indicates whether to use the latest version of the secrect."
+        "description": "Optional. Indicates whether to use the latest version of the secret."
       }
     }
   },
@@ -79,14 +79,14 @@
     "name": {
       "type": "string",
       "metadata": {
-        "description": "The name of the secrect."
+        "description": "The name of the secret."
       },
       "value": "[parameters('name')]"
     },
     "resourceId": {
       "type": "string",
       "metadata": {
-        "description": "The resource ID of the secrect."
+        "description": "The resource ID of the secret."
       },
       "value": "[resourceId('Microsoft.Cdn/profiles/secrets', parameters('profileName'), parameters('name'))]"
     },
@@ -98,4 +98,4 @@
       "value": "[resourceGroup().name]"
     }
   }
-}
\ No newline at end of file
+}
diff --git a/avm/res/cdn/profile/securityPolicies/README.md b/avm/res/cdn/profile/securityPolicies/README.md
index d82337c321..5370b79858 100644
--- a/avm/res/cdn/profile/securityPolicies/README.md
+++ b/avm/res/cdn/profile/securityPolicies/README.md
@@ -96,6 +96,6 @@ The name of the parent CDN profile. Required if the template is used in a standa
 
 | Output | Type | Description |
 | :-- | :-- | :-- |
-| `name` | string | The name of the secrect. |
+| `name` | string | The name of the secret. |
 | `resourceGroupName` | string | The name of the resource group the secret was created in. |
-| `resourceId` | string | The resource ID of the secrect. |
+| `resourceId` | string | The resource ID of the secret. |
diff --git a/avm/res/cdn/profile/securityPolicies/main.bicep b/avm/res/cdn/profile/securityPolicies/main.bicep
index 5c08bb840b..bc96175787 100644
--- a/avm/res/cdn/profile/securityPolicies/main.bicep
+++ b/avm/res/cdn/profile/securityPolicies/main.bicep
@@ -43,10 +43,10 @@ type associationsType = {
   patternsToMatch: string[]
 }[]
 
-@description('The name of the secrect.')
+@description('The name of the secret.')
 output name string = securityPolicies.name
 
-@description('The resource ID of the secrect.')
+@description('The resource ID of the secret.')
 output resourceId string = securityPolicies.id
 
 @description('The name of the resource group the secret was created in.')
diff --git a/avm/res/cdn/profile/securityPolicies/main.json b/avm/res/cdn/profile/securityPolicies/main.json
index ba9e21e315..1e7e86ef6b 100644
--- a/avm/res/cdn/profile/securityPolicies/main.json
+++ b/avm/res/cdn/profile/securityPolicies/main.json
@@ -102,14 +102,14 @@
     "name": {
       "type": "string",
       "metadata": {
-        "description": "The name of the secrect."
+        "description": "The name of the secret."
       },
       "value": "[parameters('name')]"
     },
     "resourceId": {
       "type": "string",
       "metadata": {
-        "description": "The resource ID of the secrect."
+        "description": "The resource ID of the secret."
       },
       "value": "[resourceId('Microsoft.Cdn/profiles/securityPolicies', parameters('profileName'), parameters('name'))]"
     },
@@ -121,4 +121,4 @@
       "value": "[resourceGroup().name]"
     }
   }
-}
\ No newline at end of file
+}