This template defines the properties required to deploy an Azure KeyVault.
The publicNetworkAccess parameter is a string, based on the description a value of 'disabled' turns it off, so the assumption on my part is that the allowedvalues should be 'enabled','disabled' but as the documentation is lacking it's difficult to ascertain the correct values.