Azurerm_cognitive_account independent network_acls

I have implemented single terraform script with two variable files, one for Dev and another for QA. In script, I had created azurerm_cognitive_account which is shared between Dev and QA environment and created with Dev script.

I need to restrict open ai to be accessible only from these 4 subnets.

My Vnet and Subnets are getting created in respective environment terraform scripts i.e. two subnets of dev are created using Dev terraform script and two other are getting created via QA terraform script.

As in QA i don’t create a cognitive service account but still i need to add two Subnets to network_acls. Right now i don’t find independent network_acls for azurerm_cognitive_account which can be executed to attach network ACLs for already existing azurerm_cognitive_account.

Appreciate your help on this. Let me know if any other information is required.