matt-FFFFFF

locals {
  my_string           = "Hello World!"
  my_empty_string     = ""
  my_number_as_string = "1234"
  my_bool             = true
  my_number           = 1234
  my_number_2         = 12.34
  my_list             = ["Hello", "World", "!"]
  my_set_of_strings   = toset(["Hello", "World", "!"])
  my_nested_list = [

matt-FFFFFF

variable "scenario" {
  type = string
  description = "Scenario to deploy. Must be one of 'simple', or 'complex'."
  default = "simple"
  validation {
    condition = contains(["simple", "complex"], var.scenario)
    error_message = "Scenario must be one of 'simple', or 'complex'."
  }
}

matt-FFFFFF

{
  "properties": {
    "description": "Deploys NSG flow logs and traffic analytics to a storageaccountid with a specified retention period. This must be assigned once for each in-scope region because the storage account and NSG must be in the same region.",
    "displayName": "Deploys NSG flow logs and traffic analytics",
    "mode": "all",
    "parameters": {
      "effect": {
        "allowedValues": [
          "DeployIfNotExists",
          "Disabled"

matt-FFFFFF

{
  "properties": {
    "displayName": "Disallowed Log Analytics solutions",
    "policyType": "Custom",
    "mode": "All",
    "description": "This policy enables you to specify the resource types that your organization cannot deploy.",
    "metadata": {
      "category": "General",
    },
    "parameters": {

matt-FFFFFF

{
    "$schema": "http://schema.management.azure.com/schemas/2014-04-01-preview/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "name": {
            "type": "String"
        },
        "location": {
            "type": "String"
        },

matt-FFFFFF

export KEYVAULT=<<<CHANGEME>>>

# Configure ssh forwarding
export SSH_AUTH_SOCK=$HOME/.ssh/agent.sock
# need `ps -ww` to get non-truncated command for matching
# use square brackets to generate a regex match for the process we want but that doesn't match the grep command running it!
ALREADY_RUNNING=$(ps -auxww | grep -q "[n]piperelay.exe -ei -s //./pipe/openssh-ssh-agent"; echo $?)
if [[ $ALREADY_RUNNING != "0" ]]; then
    if [[ -S $SSH_AUTH_SOCK ]]; then
        # not expecting the socket to exist as the forwarding command isn't running (http://www.tldp.org/LDP/abs/html/fto.html)

matt-FFFFFF

{
  "mode": "All",
  "policyRule": {
    "if": {
      "allOf": [
        {
          "equals": "Microsoft.Compute/virtualMachines",
          "field": "type"
        },
        {

matt-FFFFFF

{
  "mode": "All",
  "policyRule": {
    "if": {
      "equals": "Microsoft.Network/networkSecurityGroups",
      "field": "type"
    },
    "then": {
      "details": {
        "deployment": {

matt-FFFFFF

{
    "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
      "input": {
        "value": {
          "Name": "0fb51766-9c3f-422c-a5c7-322d7ef8afa8",
          "ResourceType": "Microsoft.Management/managementGroups",
          "ExtensionResourceType": "Microsoft.Authorization/roleDefinitions",
          "Location": "northeurope",

matt-FFFFFF

#!/bin/bash

# Script to clean up after Enterprise-Scale - DO NOT RUN IN PRODUCTION

echo "THIS SCRIPT WILL DESTROY YOUR AZURE ENVIRONMENT"
read -n 4 -p "Are you SURE you want to do this? (type 'yes' to continue): " YES

if [ ! "$YES" == "yes" ]; then
  echo "Confirmation denied - quitting"
  exit 0