sjwaight

# Convert plaintext to secure string
$adminPass = ConvertTo-SecureString -String 'L0Lcat5^_^!' -AsPlainText -Force
# Add the password as a Secret
Set-AzureKeyVaultSecret -VaultName 'ProvisionVault' -Name 'LocalAdminPass' -SecretValue $adminPass

sjwaight

 "adminPassword": {
     "reference": {
        "keyVault": {
          "id": "/subscriptions/{subscription-guid}/resourceGroups/{keyvault-rg}/providers/Microsoft.KeyVault/vaults/ProvisioningVault"
        },
        "secretName": "LocalAdminPass"
      }
  }

sjwaight

# Log into our Account.
Login-AzureRmAccount
# Create a new Resource Group
New-AzureRmResourceGroup -Name 'sw-sec-demo' -Location 'West US'
# Create new Key Vault instance - important to add "EnabledForDeployment"
New-AzureRmKeyVault -VaultName 'ProvisioningVault' -ResourceGroupName 'sw-sec-demo' -Location 'West US' -EnabledForTemplateDeployment

sjwaight

<?xml version="1.0"?>
<configuration>
  <appSettings />
  <connectionStrings>
    <!-- you'll need to change this to match your server - the one below is using the default local instance with Windows Auth. -->
    <add name="aspnetmembers" connectionString="server=.;initial catalog=AuthDemoApp;Integrated Security=SSPI"/>
  </connectionStrings>
  <system.web>
    <compilation debug="true"/>
    <authentication mode="Forms">

sjwaight

<connectionStrings>
  <!-- configuration data like endpoints, protocol config, relying parties etc... -->
  <add name="IdentityServerConfiguration"
       connectionString="server=.;initial catalog=IdentityServerConfiguration;Integrated Security=SSPI" 
       providerName="System.Data.SqlClient" />
  <!-- user database -->
  <add name="ProviderDB"
       connectionString="server=.;initial catalog=AuthDemoApp;Integrated Security=SSPI" 
       providerName="System.Data.SqlClient" />
</connectionStrings>

sjwaight

{
  "_comment": "originally from: https://github.com/Azure/azure-quickstart-templates/blob/master/201-web-app-vm-dsc/azuredeploy.json"
  "name": "DSCExt1",
  "type": "extensions",
  "location": "[parameters('vmLocation')]",
  "apiVersion": "2015-05-01-preview",
  "dependsOn": [
    "[concat('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"
  ],
  "tags": {

sjwaight

  "if": {
    "not": {
      "anyOf": [
        {
          "field": "tags",
          "containsKey": "CostCentre"
        },
        {
          "field": "tags",

sjwaight

{
  "Name": "Virtual Machine Power Manager",
  "IsCustom": true,
  "Description": "Can monitor, stop, start and restart v2 ARM virtual machines.",
  "Actions": [
    "Microsoft.Storage/*/read",
    "Microsoft.Network/*/read",
    "Microsoft.Compute/*/read",
    "Microsoft.Compute/virtualMachines/start/action",
    "Microsoft.Compute/virtualMachines/powerOff/action",    

sjwaight

param (
    [Parameter(Mandatory=$false)] 
    [String]$AzureCredentialAssetName = "VMPowerServicePrincipal",
	
    [Parameter(Mandatory=$false)] 
    [String]$AzureSubscriptionIDAssetName = "VMShutdownTargetSubscription",
	
    [Parameter(Mandatory=$false)] 
    [String]$AzureTenantIDAssetName = "VMShutdownTargetTenant"
)

sjwaight

$myEmailOrUpn = 'some.user@some.doman'

# can use your mailbox login
$cred = Get-Credential

$exoSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $cred -Authentication "Basic" -AllowRedirection

# Loads session and EXO Cmdlets
Import-PSSession $exoSession