Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -236,6 +236,9 @@ module configurationStore_privateEndpoints '../../Microsoft.Network/privateEndpo
tags: contains(privateEndpoint, 'tags') ? privateEndpoint.tags : {}
manualPrivateLinkServiceConnections: contains(privateEndpoint, 'manualPrivateLinkServiceConnections') ? privateEndpoint.manualPrivateLinkServiceConnections : []
customDnsConfigs: contains(privateEndpoint, 'customDnsConfigs') ? privateEndpoint.customDnsConfigs : []
ipConfigurations: contains(privateEndpoint, 'ipConfigurations') ? privateEndpoint.ipConfigurations : []
applicationSecurityGroups: contains(privateEndpoint, 'applicationSecurityGroups') ? privateEndpoint.applicationSecurityGroups : []
customNetworkInterfaceName: contains(privateEndpoint, 'customNetworkInterfaceName') ? privateEndpoint.customNetworkInterfaceName : ''
}
}]

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,6 @@ This module deploys an App Configuration Store.
| `tags` | object | `{object}` | | Tags of the resource. |
| `userAssignedIdentities` | object | `{object}` | | The ID(s) to assign to the resource. |


### Parameter Usage: `tags`

Tag names and tag values can be provided as needed. A tag can be left without a value.
Expand Down Expand Up @@ -216,7 +215,17 @@ To use Private Endpoint the following dependencies must be deployed:
"/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>" // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
},
"customDnsConfigs": [ // Optional
"ipConfigurations":[
{
"name": "myIPconfigTest02",
"properties": {
"groupId": "blob",
"memberName": "blob",
"privateIPAddress": "10.0.0.30"
}
}
],
"customDnsConfigs": [
{
"fqdn": "customname.test.local",
"ipAddresses": [
Expand Down Expand Up @@ -252,7 +261,6 @@ privateEndpoints: [
'/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>' // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
}
// Optional
customDnsConfigs: [
{
fqdn: 'customname.test.local'
Expand All @@ -261,6 +269,16 @@ privateEndpoints: [
]
}
]
ipConfigurations:[
{
name: 'myIPconfigTest02'
properties: {
groupId: 'blob'
memberName: 'blob'
privateIPAddress: '10.0.0.30'
}
}
]
}
// Example showing only mandatory fields
{
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -399,6 +399,9 @@ module automationAccount_privateEndpoints '../../Microsoft.Network/privateEndpoi
tags: contains(privateEndpoint, 'tags') ? privateEndpoint.tags : {}
manualPrivateLinkServiceConnections: contains(privateEndpoint, 'manualPrivateLinkServiceConnections') ? privateEndpoint.manualPrivateLinkServiceConnections : []
customDnsConfigs: contains(privateEndpoint, 'customDnsConfigs') ? privateEndpoint.customDnsConfigs : []
ipConfigurations: contains(privateEndpoint, 'ipConfigurations') ? privateEndpoint.ipConfigurations : []
applicationSecurityGroups: contains(privateEndpoint, 'applicationSecurityGroups') ? privateEndpoint.applicationSecurityGroups : []
customNetworkInterfaceName: contains(privateEndpoint, 'customNetworkInterfaceName') ? privateEndpoint.customNetworkInterfaceName : ''
}
}]

Expand Down
26 changes: 23 additions & 3 deletions modules/Microsoft.Automation/automationAccounts/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -78,9 +78,10 @@ This module deploys an Azure Automation Account.
| `userAssignedIdentities` | object | `{object}` | | The ID(s) to assign to the resource. |
| `variables` | _[variables](variables/readme.md)_ array | `[]` | | List of variables to be created in the automation account. |


### Parameter Usage: `encryption`

Prerequisites:

- User Assigned Identity for Encryption needs `Get`, `List`, `Wrap` and `Unwrap` permissions on the key.
- User Assigned Identity have to be one of the defined identities in userAssignedIdentities parameter block.
- To use Azure Automation with customer managed keys, both `Soft Delete` and `Do Not Purge` features must be turned on to allow for recovery of keys in case of accidental deletion.
Expand Down Expand Up @@ -156,7 +157,17 @@ To use Private Endpoint the following dependencies must be deployed:
"/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>" // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
},
"customDnsConfigs": [ // Optional
"ipConfigurations":[
{
"name": "myIPconfigTest02",
"properties": {
"groupId": "blob",
"memberName": "blob",
"privateIPAddress": "10.0.0.30"
}
}
],
"customDnsConfigs": [
{
"fqdn": "customname.test.local",
"ipAddresses": [
Expand Down Expand Up @@ -192,7 +203,6 @@ privateEndpoints: [
'/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>' // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
}
// Optional
customDnsConfigs: [
{
fqdn: 'customname.test.local'
Expand All @@ -201,6 +211,16 @@ privateEndpoints: [
]
}
]
ipConfigurations:[
{
name: 'myIPconfigTest02'
properties: {
groupId: 'blob'
memberName: 'blob'
privateIPAddress: '10.0.0.30'
}
}
]
}
// Example showing only mandatory fields
{
Expand Down
3 changes: 3 additions & 0 deletions modules/Microsoft.Batch/batchAccounts/deploy.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -266,6 +266,9 @@ module batchAccount_privateEndpoints '../../Microsoft.Network/privateEndpoints/d
tags: contains(privateEndpoint, 'tags') ? privateEndpoint.tags : {}
manualPrivateLinkServiceConnections: contains(privateEndpoint, 'manualPrivateLinkServiceConnections') ? privateEndpoint.manualPrivateLinkServiceConnections : []
customDnsConfigs: contains(privateEndpoint, 'customDnsConfigs') ? privateEndpoint.customDnsConfigs : []
ipConfigurations: contains(privateEndpoint, 'ipConfigurations') ? privateEndpoint.ipConfigurations : []
applicationSecurityGroups: contains(privateEndpoint, 'applicationSecurityGroups') ? privateEndpoint.applicationSecurityGroups : []
customNetworkInterfaceName: contains(privateEndpoint, 'customNetworkInterfaceName') ? privateEndpoint.customNetworkInterfaceName : ''
}
}]

Expand Down
24 changes: 21 additions & 3 deletions modules/Microsoft.Batch/batchAccounts/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,6 @@
| `tags` | object | `{object}` | | Tags of the resource. |
| `userAssignedIdentities` | object | `{object}` | | The ID(s) to assign to the resource. |


### Parameter Usage: `tags`

Tag names and tag values can be provided as needed. A tag can be left without a value.
Expand Down Expand Up @@ -163,7 +162,17 @@ To use Private Endpoint the following dependencies must be deployed:
"/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>" // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
},
"customDnsConfigs": [ // Optional
"ipConfigurations":[
{
"name": "myIPconfigTest02",
"properties": {
"groupId": "blob",
"memberName": "blob",
"privateIPAddress": "10.0.0.30"
}
}
],
"customDnsConfigs": [
{
"fqdn": "customname.test.local",
"ipAddresses": [
Expand Down Expand Up @@ -199,7 +208,6 @@ privateEndpoints: [
'/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>' // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
}
// Optional
customDnsConfigs: [
{
fqdn: 'customname.test.local'
Expand All @@ -208,6 +216,16 @@ privateEndpoints: [
]
}
]
ipConfigurations:[
{
name: 'myIPconfigTest02'
properties: {
groupId: 'blob'
memberName: 'blob'
privateIPAddress: '10.0.0.30'
}
}
]
}
// Example showing only mandatory fields
{
Expand Down
3 changes: 3 additions & 0 deletions modules/Microsoft.Cache/redis/deploy.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -266,6 +266,9 @@ module redisCache_privateEndpoints '../../Microsoft.Network/privateEndpoints/dep
tags: contains(privateEndpoint, 'tags') ? privateEndpoint.tags : {}
manualPrivateLinkServiceConnections: contains(privateEndpoint, 'manualPrivateLinkServiceConnections') ? privateEndpoint.manualPrivateLinkServiceConnections : []
customDnsConfigs: contains(privateEndpoint, 'customDnsConfigs') ? privateEndpoint.customDnsConfigs : []
ipConfigurations: contains(privateEndpoint, 'ipConfigurations') ? privateEndpoint.ipConfigurations : []
applicationSecurityGroups: contains(privateEndpoint, 'applicationSecurityGroups') ? privateEndpoint.applicationSecurityGroups : []
customNetworkInterfaceName: contains(privateEndpoint, 'customNetworkInterfaceName') ? privateEndpoint.customNetworkInterfaceName : ''
}
}]

Expand Down
24 changes: 21 additions & 3 deletions modules/Microsoft.Cache/redis/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,6 @@ This module deploys a Redis Cache service.
| `tenantSettings` | object | `{object}` | | A dictionary of tenant settings. |
| `userAssignedIdentities` | object | `{object}` | | The ID(s) to assign to the resource. |


### Parameter Usage: `roleAssignments`

Create a role assignment for the given resource. If you want to assign a service principal / managed identity that is created in the same deployment, make sure to also specify the `'principalType'` parameter and set it to `'ServicePrincipal'`. This will ensure the role assignment waits for the principal's propagation in Azure.
Expand Down Expand Up @@ -254,7 +253,17 @@ To use Private Endpoint the following dependencies must be deployed:
"/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>" // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
},
"customDnsConfigs": [ // Optional
"ipConfigurations":[
{
"name": "myIPconfigTest02",
"properties": {
"groupId": "blob",
"memberName": "blob",
"privateIPAddress": "10.0.0.30"
}
}
],
"customDnsConfigs": [
{
"fqdn": "customname.test.local",
"ipAddresses": [
Expand Down Expand Up @@ -290,7 +299,6 @@ privateEndpoints: [
'/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>' // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
}
// Optional
customDnsConfigs: [
{
fqdn: 'customname.test.local'
Expand All @@ -299,6 +307,16 @@ privateEndpoints: [
]
}
]
ipConfigurations:[
{
name: 'myIPconfigTest02'
properties: {
groupId: 'blob'
memberName: 'blob'
privateIPAddress: '10.0.0.30'
}
}
]
}
// Example showing only mandatory fields
{
Expand Down
3 changes: 3 additions & 0 deletions modules/Microsoft.CognitiveServices/accounts/deploy.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -309,6 +309,9 @@ module cognitiveServices_privateEndpoints '../../Microsoft.Network/privateEndpoi
tags: contains(privateEndpoint, 'tags') ? privateEndpoint.tags : {}
manualPrivateLinkServiceConnections: contains(privateEndpoint, 'manualPrivateLinkServiceConnections') ? privateEndpoint.manualPrivateLinkServiceConnections : []
customDnsConfigs: contains(privateEndpoint, 'customDnsConfigs') ? privateEndpoint.customDnsConfigs : []
ipConfigurations: contains(privateEndpoint, 'ipConfigurations') ? privateEndpoint.ipConfigurations : []
applicationSecurityGroups: contains(privateEndpoint, 'applicationSecurityGroups') ? privateEndpoint.applicationSecurityGroups : []
customNetworkInterfaceName: contains(privateEndpoint, 'customNetworkInterfaceName') ? privateEndpoint.customNetworkInterfaceName : ''
}
}]

Expand Down
25 changes: 21 additions & 4 deletions modules/Microsoft.CognitiveServices/accounts/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -73,7 +73,6 @@ This module deploys different kinds of cognitive services resources
| `tags` | object | `{object}` | | Tags of the resource. |
| `userOwnedStorage` | array | `[]` | | The storage accounts for this resource. |


### Parameter Usage: `privateEndpoints`

To use Private Endpoint the following dependencies must be deployed:
Expand All @@ -98,7 +97,17 @@ To use Private Endpoint the following dependencies must be deployed:
"/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>" // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
},
"customDnsConfigs": [ // Optional
"ipConfigurations":[
{
"name": "myIPconfigTest02",
"properties": {
"groupId": "blob",
"memberName": "blob",
"privateIPAddress": "10.0.0.30"
}
}
],
"customDnsConfigs": [
{
"fqdn": "customname.test.local",
"ipAddresses": [
Expand Down Expand Up @@ -134,7 +143,6 @@ privateEndpoints: [
'/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>' // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
}
// Optional
customDnsConfigs: [
{
fqdn: 'customname.test.local'
Expand All @@ -143,6 +151,16 @@ privateEndpoints: [
]
}
]
ipConfigurations:[
{
name: 'myIPconfigTest02'
properties: {
groupId: 'blob'
memberName: 'blob'
privateIPAddress: '10.0.0.30'
}
}
]
}
// Example showing only mandatory fields
{
Expand Down Expand Up @@ -337,7 +355,6 @@ tags: {

</details>


<details>

<summary>Bicep format</summary>
Expand Down
3 changes: 3 additions & 0 deletions modules/Microsoft.ContainerRegistry/registries/deploy.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -384,6 +384,9 @@ module registry_privateEndpoints '../../Microsoft.Network/privateEndpoints/deplo
tags: contains(privateEndpoint, 'tags') ? privateEndpoint.tags : {}
manualPrivateLinkServiceConnections: contains(privateEndpoint, 'manualPrivateLinkServiceConnections') ? privateEndpoint.manualPrivateLinkServiceConnections : []
customDnsConfigs: contains(privateEndpoint, 'customDnsConfigs') ? privateEndpoint.customDnsConfigs : []
ipConfigurations: contains(privateEndpoint, 'ipConfigurations') ? privateEndpoint.ipConfigurations : []
applicationSecurityGroups: contains(privateEndpoint, 'applicationSecurityGroups') ? privateEndpoint.applicationSecurityGroups : []
customNetworkInterfaceName: contains(privateEndpoint, 'customNetworkInterfaceName') ? privateEndpoint.customNetworkInterfaceName : ''
}
}]

Expand Down
24 changes: 21 additions & 3 deletions modules/Microsoft.ContainerRegistry/registries/readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,7 +80,6 @@ Azure Container Registry is a managed, private Docker registry service based on
| `webhooks` | _[webhooks](webhooks/readme.md)_ array | `[]` | | All webhooks to create. |
| `zoneRedundancy` | string | `'Disabled'` | `[Disabled, Enabled]` | Whether or not zone redundancy is enabled for this container registry. |


### Parameter Usage: `roleAssignments`

Create a role assignment for the given resource. If you want to assign a service principal / managed identity that is created in the same deployment, make sure to also specify the `'principalType'` parameter and set it to `'ServicePrincipal'`. This will ensure the role assignment waits for the principal's propagation in Azure.
Expand Down Expand Up @@ -199,7 +198,17 @@ To use Private Endpoint the following dependencies must be deployed:
"/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>" // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
},
"customDnsConfigs": [ // Optional
"ipConfigurations":[
{
"name": "myIPconfigTest02",
"properties": {
"groupId": "blob",
"memberName": "blob",
"privateIPAddress": "10.0.0.30"
}
}
],
"customDnsConfigs": [
{
"fqdn": "customname.test.local",
"ipAddresses": [
Expand Down Expand Up @@ -235,7 +244,6 @@ privateEndpoints: [
'/subscriptions/<<subscriptionId>>/resourceGroups/validation-rg/providers/Microsoft.Network/privateDnsZones/<privateDnsZoneName>' // e.g. privatelink.vaultcore.azure.net, privatelink.azurecr.io, privatelink.blob.core.windows.net
]
}
// Optional
customDnsConfigs: [
{
fqdn: 'customname.test.local'
Expand All @@ -244,6 +252,16 @@ privateEndpoints: [
]
}
]
ipConfigurations:[
{
name: 'myIPconfigTest02'
properties: {
groupId: 'blob'
memberName: 'blob'
privateIPAddress: '10.0.0.30'
}
}
]
}
// Example showing only mandatory fields
{
Expand Down
3 changes: 3 additions & 0 deletions modules/Microsoft.DataFactory/factories/deploy.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -285,6 +285,9 @@ module dataFactory_privateEndpoints '../../Microsoft.Network/privateEndpoints/de
tags: contains(privateEndpoint, 'tags') ? privateEndpoint.tags : {}
manualPrivateLinkServiceConnections: contains(privateEndpoint, 'manualPrivateLinkServiceConnections') ? privateEndpoint.manualPrivateLinkServiceConnections : []
customDnsConfigs: contains(privateEndpoint, 'customDnsConfigs') ? privateEndpoint.customDnsConfigs : []
ipConfigurations: contains(privateEndpoint, 'ipConfigurations') ? privateEndpoint.ipConfigurations : []
applicationSecurityGroups: contains(privateEndpoint, 'applicationSecurityGroups') ? privateEndpoint.applicationSecurityGroups : []
customNetworkInterfaceName: contains(privateEndpoint, 'customNetworkInterfaceName') ? privateEndpoint.customNetworkInterfaceName : ''
}
}]

Expand Down
Loading