@drunk-pulumi/azure 0.0.36 → 0.0.38

package/VNet/types.d.ts

@@ -0,0 +1,94 @@
+import { enums, input as inputs } from "@pulumi/azure-native/types";
+import { Input, Output } from "@pulumi/pulumi";
+import * as pulumi from "@pulumi/pulumi";
+export type VnetInfoType = {
+    vnetName: Input<string>;
+    resourceGroupName: Input<string>;
+    subscriptionId?: Input<string>;
+};
+export interface RouteArgs {
+    name?: Input<string>;
+    addressPrefix?: pulumi.Input<string>;
+    hasBgpOverride?: pulumi.Input<boolean>;
+    nextHopIpAddress?: pulumi.Input<string>;
+    nextHopType: pulumi.Input<string | enums.network.RouteNextHopType>;
+}
+export interface CustomSecurityRuleArgs {
+    access: pulumi.Input<string | enums.network.SecurityRuleAccess>;
+    description?: pulumi.Input<string>;
+    destinationAddressPrefix?: pulumi.Input<string>;
+    destinationAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
+    destinationApplicationSecurityGroups?: pulumi.Input<pulumi.Input<inputs.network.ApplicationSecurityGroupArgs>[]>;
+    destinationPortRange?: pulumi.Input<string>;
+    destinationPortRanges?: pulumi.Input<pulumi.Input<string>[]>;
+    direction: pulumi.Input<string | enums.network.SecurityRuleDirection>;
+    name?: pulumi.Input<string>;
+    priority: pulumi.Input<number>;
+    protocol: pulumi.Input<string | enums.network.SecurityRuleProtocol>;
+    sourceAddressPrefix?: pulumi.Input<string>;
+    sourceAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
+    sourceApplicationSecurityGroups?: pulumi.Input<pulumi.Input<inputs.network.ApplicationSecurityGroupArgs>[]>;
+    sourcePortRange?: pulumi.Input<string>;
+    sourcePortRanges?: pulumi.Input<pulumi.Input<string>[]>;
+    type?: pulumi.Input<string>;
+}
+export interface NatRuleArgs {
+    description?: Input<string>;
+    destinationAddresses?: Input<Input<string>[]>;
+    destinationPorts?: Input<Input<string>[]>;
+    ipProtocols?: Input<Input<string | enums.network.FirewallPolicyRuleNetworkProtocol>[]>;
+    name?: Input<string>;
+    ruleType: Input<"NatRule">;
+    sourceAddresses?: Input<Input<string>[]>;
+    sourceIpGroups?: Input<Input<string>[]>;
+    translatedAddress?: Input<string>;
+    translatedFqdn?: Input<string>;
+    translatedPort?: Input<string>;
+}
+export interface NetworkRuleArgs {
+    description?: Input<string>;
+    destinationAddresses?: Input<Input<string>[]>;
+    destinationFqdns?: Input<Input<string>[]>;
+    destinationIpGroups?: Input<Input<string>[]>;
+    destinationPorts?: Input<Input<string>[]>;
+    ipProtocols?: Input<Input<string | enums.network.FirewallPolicyRuleNetworkProtocol>[]>;
+    name?: Input<string>;
+    ruleType: Input<"NetworkRule">;
+    sourceAddresses?: Input<Input<string>[]>;
+    sourceIpGroups?: Input<Input<string>[]>;
+}
+export interface ApplicationRuleArgs {
+    description?: Input<string>;
+    fqdnTags?: Input<Input<string>[]>;
+    httpHeadersToInsert?: Input<Input<inputs.network.FirewallPolicyHttpHeaderToInsertArgs>[]>;
+    name?: Input<string>;
+    protocols?: Input<Input<inputs.network.FirewallPolicyRuleApplicationProtocolArgs>[]>;
+    ruleType: Input<"ApplicationRule">;
+    sourceAddresses?: Input<Input<string>[]>;
+    sourceIpGroups?: Input<Input<string>[]>;
+    targetFqdns?: Input<Input<string>[]>;
+    targetUrls?: Input<Input<string>[]>;
+    terminateTLS?: Input<boolean>;
+    webCategories?: Input<Input<string>[]>;
+}
+export type FirewallPolicyRuleCollectionResults = {
+    name: string;
+    priority: number;
+    ruleCollections: Input<Input<inputs.network.FirewallPolicyFilterRuleCollectionArgs | inputs.network.FirewallPolicyNatRuleCollectionArgs>[]>;
+};
+export type FirewallPolicyResults = {
+    name: string;
+    dnatRules?: Array<Input<NatRuleArgs>>;
+    netRules?: Array<Input<NetworkRuleArgs>>;
+    appRules?: Array<Input<ApplicationRuleArgs>>;
+};
+export interface FirewallPolicyProps {
+    /**These props for create new policy*/
+    parentPolicyId?: Output<string>;
+    rules?: FirewallPolicyRuleCollectionResults[];
+}
+export interface FirewallRuleResults {
+    applicationRuleCollections?: inputs.network.AzureFirewallApplicationRuleCollectionArgs[];
+    natRuleCollections?: inputs.network.AzureFirewallNatRuleCollectionArgs[];
+    networkRuleCollections?: inputs.network.AzureFirewallNetworkRuleCollectionArgs[];
+}

package/VNet/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvVk5ldC90eXBlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiIn0=

package/Web/types.d.ts

@@ -1,5 +1,5 @@
-import * as pulumi from '@pulumi/pulumi';
-import { ConnectionStringType } from '@pulumi/azure-native/types/enums/web';
+import * as pulumi from "@pulumi/pulumi";
+import { ConnectionStringType } from "@pulumi/azure-native/types/enums/web";
 export interface NameValuePairArgs {
     name: pulumi.Input<string>;
     value: pulumi.Input<string>;
@@ -14,155 +14,23 @@ interface CorsSettingsArgs {
     supportCredentials?: pulumi.Input<boolean>;
 }
 export interface SiteConfigArgs {
-    /**
-     * Always On
-     */
     alwaysOn?: pulumi.Input<boolean>;
-    /**
-     * Information about the formal API definition for the web app.
-     */
-    /**
-     * App Command Line to launch
-     */
     appCommandLine?: pulumi.Input<string>;
-    /**
-     * Application Settings
-     */
     appSettings?: pulumi.Input<pulumi.Input<NameValuePairArgs>[]>;
-    /**
-     * Auto heal enabled
-     */
     autoHealEnabled?: pulumi.Input<boolean>;
-    /**
-     * Auto heal rules
-     */
-    /**
-     * Auto swap slot name
-     */
-    /**
-     * Connection strings
-     */
     connectionStrings?: pulumi.Input<pulumi.Input<ConnStringInfoArgs>[]>;
-    /**
-     * Cross-Origin Resource Sharing (CORS) settings.
-     */
     cors?: pulumi.Input<CorsSettingsArgs>;
-    /**
-     * Default documents
-     */
     defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
-    /**
-     * Detailed error logging enabled
-     */
     detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
-    /**
-     * Document root
-     */
     documentRoot?: pulumi.Input<string>;
-    /**
-     * This is work around for polymorphic types
-     */
-    /**
-     * Handler mappings
-     */
-    /**
-     * HTTP logging Enabled
-     */
-    /**
-     * Resource Id
-     */
-    /**
-     * Ip Security restrictions
-     */
-    /**
-     * Site limits
-     */
-    /**
-     * Site load balancing
-     */
-    /**
-     * Local mysql enabled
-     */
-    /**
-     * Resource Location
-     */
-    /**
-     * HTTP Logs Directory size limit
-     */
-    /**
-     * Managed pipeline mode
-     */
-    /**
-     * Site Metadata
-     */
-    /**
-     * Resource Name
-     */
-    /**
-     * Net Framework Version
-     */
-    /**
-     * Version of Node
-     */
     nodeVersion?: pulumi.Input<string>;
-    /**
-     * Number of workers
-     */
     numberOfWorkers?: pulumi.Input<number>;
-    /**
-     * Version of PHP
-     */
-    /**
-     * Publishing password
-     */
-    /**
-     * Publishing user name
-     */
-    /**
-     * Version of Python
-     */
-    /**
-     * Remote Debugging Enabled
-     */
     remoteDebuggingEnabled?: pulumi.Input<boolean>;
-    /**
-     * Remote Debugging Version
-     */
     remoteDebuggingVersion?: pulumi.Input<string>;
-    /**
-     * Enable request tracing
-     */
     requestTracingEnabled?: pulumi.Input<boolean>;
-    /**
-     * Request tracing expiration time
-     */
     requestTracingExpirationTime?: pulumi.Input<string>;
-    /**
-     * SCM type
-     */
     scmType?: pulumi.Input<string>;
-    /**
-     * Resource tags
-     */
-    /**
-     * Tracing options
-     */
     tracingOptions?: pulumi.Input<string>;
-    /**
-     * Resource type
-     */
-    /**
-     * Use 32 bit worker process
-     */
-    /**
-     * Virtual applications
-     */
-    /**
-     * Vnet name
-     */
-    /**
-     * Web socket enabled.
-     */
     webSocketsEnabled?: pulumi.Input<boolean>;
     linuxFxVersion?: pulumi.Input<string>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drunk-pulumi/azure",
-  "version": "0.0.36",
+  "version": "0.0.38",
   "author": "drunkcoding@outlook.com",
   "description": "The custom helpers pulumi-azure",
   "license": "MIT",
@@ -17,13 +17,13 @@
     "url": "https://github.com/baoduy/drunk-pulumi-azure.git"
   },
   "dependencies": {
-    "@drunk-pulumi/azure-providers": "^0.0.7",
-    "@pulumi/azure-native": "^2.38.0",
-    "@pulumi/azuread": "5.48.0",
-    "@pulumi/pulumi": "^3.113.3",
-    "@pulumi/random": "^4.16.1",
-    "@pulumi/tls": "^5.0.2",
-    "axios": "^1.6.8",
+    "@drunk-pulumi/azure-providers": "^0.0.9",
+    "@pulumi/azure-native": "^2.43.1",
+    "@pulumi/azuread": "5.50.0",
+    "@pulumi/pulumi": "^3.118.0",
+    "@pulumi/random": "^4.16.2",
+    "@pulumi/tls": "^5.0.3",
+    "axios": "^1.7.2",
     "netmask": "^2.0.2",
     "node-forge": "^1.3.1",
     "to-words": "^4.0.1"

package/types.d.ts

@@ -1,8 +1,11 @@
-import { Input, Output, Resource } from '@pulumi/pulumi';
-import * as authorization from '@pulumi/azure-native/authorization';
-import { DiagnosticSetting } from '@pulumi/azure-native/aadiam/diagnosticSetting';
+import { Input, Output, Resource } from "@pulumi/pulumi";
+import * as authorization from "@pulumi/azure-native/authorization";
+import { DiagnosticSetting } from "@pulumi/azure-native/aadiam/diagnosticSetting";
+import { EnvRoleKeyTypes } from "./AzAd/EnvRoles";
 export interface BasicArgs {
     dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+    importUri?: string;
+    ignoreChanges?: string[];
 }
 export interface ResourceGroupInfo {
     resourceGroupName: string;
@@ -22,7 +25,7 @@ export interface PrivateLinkProps {
 }
 export interface NetworkRulesProps {
     subnetId?: Input<string>;
-    privateLink?: Omit<PrivateLinkProps, 'subnetId'>;
+    privateLink?: Omit<PrivateLinkProps, "subnetId">;
     ipAddresses?: Input<string>[];
 }
 export interface BasicMonitorArgs extends BasicArgs {
@@ -35,12 +38,17 @@ export interface DiagnosticProps extends BasicMonitorArgs {
     metricsCategories?: string[];
     logsCategories?: string[];
 }
+export type ResourceType = {
+    name: string;
+    groupName: string;
+    formattedName?: boolean;
+};
 export interface ResourceInfo {
     resourceName: string;
     group: ResourceGroupInfo;
     id: Output<string>;
 }
-export interface ApimInfo extends Omit<ResourceInfo, 'resourceName' | 'id'> {
+export interface ApimInfo extends Omit<ResourceInfo, "resourceName" | "id"> {
     serviceName: string;
 }
 export interface BasicResourceArgs extends BasicArgs {
@@ -49,9 +57,7 @@ export interface BasicResourceArgs extends BasicArgs {
 }
 export interface DefaultResourceArgs extends BasicArgs {
     lock?: boolean;
-    monitoring?: Omit<DiagnosticProps, 'name' | 'targetResourceId'>;
-    importUri?: string;
-    ignoreChanges?: string[];
+    monitoring?: Omit<DiagnosticProps, "name" | "targetResourceId">;
 }
 export interface BasicResourceResultProps<TClass> {
     name: string;
@@ -69,3 +75,11 @@ export interface KeyVaultInfo {
 export interface AppInsightInfo extends ResourceInfo {
     instrumentationKey: Input<string>;
 }
+export type IdentityRoleAssignment = {
+    vaultInfo?: KeyVaultInfo;
+    roles?: Array<{
+        name: string;
+        scope: Input<string>;
+    }>;
+    envRole?: EnvRoleKeyTypes;
+};

package/z_tests/_tools/Mocks.js

@@ -6,7 +6,7 @@ const tryFindName = (props) => {
     if (!name) {
         const keys = Object.keys(props);
         //Try to find the name that is not a resourceGroupName
-        let key = keys.find((k) => k.endsWith('Name'));
+        let key = keys.find((k) => k.endsWith("Name"));
         if (key) {
             name = props[key];
         }
@@ -17,31 +17,30 @@ const tryFindName = (props) => {
 exports.default = pulumi.runtime.setMocks({
     newResource: (args) => {
         const name = tryFindName(args.inputs);
-        //console.log(`Mocks resource ${name}`);
         return {
             id: `/subscriptions/12345/resourceGroups/resr-group/providers/${name}`,
             name,
             state: {
                 name,
                 ...args.inputs,
-                result: args.type.includes('Random')
-                    ? '5c1c5657-085b-41c8-8d11-de897e70eae7'
-                    : name.endsWith('ssh')
+                result: args.type.includes("Random")
+                    ? "5c1c5657-085b-41c8-8d11-de897e70eae7"
+                    : name.endsWith("ssh")
                         ? {
-                            publicKey: '1234567890',
-                            privateKey: '1234567890',
+                            publicKey: "1234567890",
+                            privateKey: "1234567890",
                         }
-                        : '',
+                        : "",
             },
         };
     },
     call: (args) => {
-        if (args.token === 'azure:core/getSubscription:getSubscription')
+        if (args.token === "azure:core/getSubscription:getSubscription")
             return {
-                id: '00000000-0000-0000-0000-000000000000',
-                display_name: 'subscription',
+                id: "00000000-0000-0000-0000-000000000000",
+                display_name: "subscription",
             };
         return args.inputs;
     },
-}, 'testProject', 'testStack', false, 'testOrganization');
-//# sourceMappingURL=data:application/json;base64,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
+}, "testProject", "testStack", false, "testOrganization");
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiTW9ja3MuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvel90ZXN0cy9fdG9vbHMvTW9ja3MudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQSx5Q0FBeUM7QUFFekMsTUFBTSxXQUFXLEdBQUcsQ0FBQyxLQUFVLEVBQUUsRUFBRTtJQUNqQyxJQUFJLElBQUksR0FBVyxLQUFLLENBQUMsSUFBSSxJQUFJLEtBQUssQ0FBQyxZQUFZLENBQUM7SUFFcEQsSUFBSSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQ1YsTUFBTSxJQUFJLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQztRQUNoQyxzREFBc0Q7UUFDdEQsSUFBSSxHQUFHLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDO1FBRS9DLElBQUksR0FBRyxFQUFFLENBQUM7WUFDUixJQUFJLEdBQUcsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQ3BCLENBQUM7SUFDSCxDQUFDO0lBQ0QseURBQXlEO0lBQ3pELE9BQU8sSUFBSSxDQUFDO0FBQ2QsQ0FBQyxDQUFDO0FBRUYsa0JBQWUsTUFBTSxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQ3BDO0lBQ0UsV0FBVyxFQUFFLENBQ1gsSUFBcUMsRUFLckMsRUFBRTtRQUNGLE1BQU0sSUFBSSxHQUFHLFdBQVcsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLENBQUM7UUFFdEMsT0FBTztZQUNMLEVBQUUsRUFBRSw0REFBNEQsSUFBSSxFQUFFO1lBQ3RFLElBQUk7WUFDSixLQUFLLEVBQUU7Z0JBQ0wsSUFBSTtnQkFDSixHQUFHLElBQUksQ0FBQyxNQUFNO2dCQUNkLE1BQU0sRUFBRSxJQUFJLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUM7b0JBQ2xDLENBQUMsQ0FBQyxzQ0FBc0M7b0JBQ3hDLENBQUMsQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQzt3QkFDcEIsQ0FBQyxDQUFDOzRCQUNFLFNBQVMsRUFBRSxZQUFZOzRCQUN2QixVQUFVLEVBQUUsWUFBWTt5QkFDekI7d0JBQ0gsQ0FBQyxDQUFDLEVBQUU7YUFDVDtTQUNGLENBQUM7SUFDSixDQUFDO0lBQ0QsSUFBSSxFQUFFLENBQUMsSUFBaUMsRUFBRSxFQUFFO1FBQzFDLElBQUksSUFBSSxDQUFDLEtBQUssS0FBSyw0Q0FBNEM7WUFDN0QsT0FBTztnQkFDTCxFQUFFLEVBQUUsc0NBQXNDO2dCQUMxQyxZQUFZLEVBQUUsY0FBYzthQUM3QixDQUFDO1FBQ0osT0FBTyxJQUFJLENBQUMsTUFBTSxDQUFDO0lBQ3JCLENBQUM7Q0FDRixFQUNELGFBQWEsRUFDYixXQUFXLEVBQ1gsS0FBSyxFQUNMLGtCQUFrQixDQUNuQixDQUFDIn0=

package/Automation/AutoAccount.d.ts

@@ -1,5 +0,0 @@
-import { BasicResourceArgs } from '../types';
-interface Props extends BasicResourceArgs {
-}
-declare const _default: ({ name, group }: Props) => import("@pulumi/azure-native/automation/automationAccount").AutomationAccount;
-export default _default;

package/Automation/AutoAccount.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const automation = require("@pulumi/azure-native/automation");
-const Naming_1 = require("../Common/Naming");
-exports.default = ({ name, group }) => {
-    name = (0, Naming_1.getAutomationAccountName)(name);
-    return new automation.AutomationAccount(name, {
-        automationAccountName: name,
-        ...group,
-        publicNetworkAccess: false,
-        identity: { type: 'SystemAssigned' },
-        disableLocalAuth: true,
-        sku: {
-            name: 'Free', //Free, Basic
-        },
-    });
-};
-//# sourceMappingURL=data:application/json;base64,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

package/AzAd/Identities/AzDevOps.d.ts

@@ -1,23 +0,0 @@
-import { KeyVaultInfo } from '../../types';
-export declare const defaultName = "azure-devops";
-interface Props {
-    name?: string;
-    enableOwner?: boolean;
-    vaultInfo?: KeyVaultInfo;
-    allowAccessPolicy?: boolean;
-}
-/** Get Global  ADO Identity */
-export declare const getAdoIdentity: () => import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<{
-    app: import("@pulumi/azuread").GetApplicationResult;
-    principal: import("@pulumi/azuread").GetServicePrincipalResult;
-}>>;
-/** Create Global ADO Identity */
-declare const _default: ({ name, enableOwner, vaultInfo, allowAccessPolicy, ...others }: Props) => import("../Identity").IdentityResult & {
-    vaultNames: {
-        clientIdKeyName: string;
-        clientSecretKeyName: string;
-        principalIdKeyName: string;
-        principalSecretKeyName: string;
-    };
-};
-export default _default;

package/AzAd/Identities/AzDevOps.js

@@ -1,61 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getAdoIdentity = exports.defaultName = void 0;
-const Identity_1 = require("../Identity");
-const Helper_1 = require("../Helper");
-const GraphDefinition_1 = require("../GraphDefinition");
-const pulumi_1 = require("@pulumi/pulumi");
-exports.defaultName = 'azure-devops';
-/** Get Global  ADO Identity */
-const getAdoIdentity = () => (0, pulumi_1.output)((0, Helper_1.getIdentity)(exports.defaultName, true));
-exports.getAdoIdentity = getAdoIdentity;
-/** Create Global ADO Identity */
-exports.default = ({ name = exports.defaultName, enableOwner, vaultInfo, allowAccessPolicy, ...others }) => {
-    const graphAccess = (0, GraphDefinition_1.getGraphPermissions)({ name: 'User.Read', type: 'Scope' });
-    const principalRoles = enableOwner
-        ? [{ roleName: 'Owner' }]
-        : [
-            { roleName: 'Contributor' },
-            { roleName: 'Network Contributor' },
-            { roleName: 'Storage Account Contributor' },
-            { roleName: 'Storage Blob Data Contributor' },
-            { roleName: 'Storage File Data SMB Share Contributor' },
-            { roleName: 'Storage Queue Data Contributor' },
-            { roleName: 'Storage Table Data Contributor' },
-            { roleName: 'Log Analytics Contributor' },
-            { roleName: 'Key Vault Administrator' },
-            { roleName: 'Key Vault Certificates Officer' },
-            { roleName: 'Key Vault Contributor' },
-            { roleName: 'Key Vault Crypto Officer' },
-            { roleName: 'Key Vault Crypto Service Encryption User' },
-            { roleName: 'Key Vault Crypto User' },
-            { roleName: 'Key Vault Secrets Officer' },
-            { roleName: 'Key Vault Secrets User' },
-            { roleName: 'User Access Administrator' },
-            { roleName: 'AcrPush' },
-            { roleName: 'AcrPull' },
-            { roleName: 'Data Factory Contributor' },
-        ];
-    const ado = (0, Identity_1.default)({
-        name,
-        appType: 'web',
-        createClientSecret: true,
-        createPrincipal: true,
-        requiredResourceAccesses: [graphAccess],
-        principalRoles,
-        vaultInfo,
-        ...others,
-    });
-    //Grant key vault permission to ADO
-    // if (allowAccessPolicy && vaultInfo) {
-    //   grantVaultAccessPolicy({
-    //     vaultInfo,
-    //     name: 'azure-devops-vault-permission',
-    //     permission: 'ReadWrite',
-    //     objectId: ado.objectId,
-    //   });
-    // }
-    console.log(`Add this principal ${name} to [User administrator, Application administrator, Cloud application administrator and Global Reader] of Azure AD to allow to Add/Update and Delete Groups, Users`);
-    return ado;
-};
-//# sourceMappingURL=data:application/json;base64,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

package/AzAd/KeyVaultRoles.d.ts

@@ -1,8 +0,0 @@
-export declare const getVaultRoleNames: (name: string) => {
-    readOnly: string;
-    admin: string;
-};
-export declare const createVaultRoles: (name: string) => {
-    adminGroup: import("@pulumi/pulumi").Output<import("@pulumi/azuread/group").Group>;
-    readOnlyGroup: import("@pulumi/pulumi").Output<import("@pulumi/azuread/group").Group>;
-};

package/AzAd/KeyVaultRoles.js

@@ -1,53 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createVaultRoles = exports.getVaultRoleNames = void 0;
-const AzureEnv_1 = require("../Common/AzureEnv");
-const Role_1 = require("./Role");
-const AzDevOps_1 = require("./Identities/AzDevOps");
-const Group_1 = require("./Group");
-const getConfig = (name) => ({
-    readOnly: {
-        env: AzureEnv_1.currentEnv,
-        roleName: "Readonly",
-        appName: "KeyVault",
-        moduleName: name,
-    },
-    admin: {
-        env: AzureEnv_1.currentEnv,
-        roleName: "Admin",
-        appName: "KeyVault",
-        moduleName: name,
-    },
-});
-const getVaultRoleNames = (name) => {
-    const vaultRoleConfig = getConfig(name);
-    return {
-        readOnly: (0, Role_1.getRoleName)({ ...vaultRoleConfig.readOnly }),
-        admin: (0, Role_1.getRoleName)({ ...vaultRoleConfig.admin }),
-    };
-};
-exports.getVaultRoleNames = getVaultRoleNames;
-const createVaultRoles = (name) => {
-    const vaultRoleConfig = getConfig(name);
-    //Admin
-    const adminGroup = (0, Role_1.default)({
-        ...vaultRoleConfig.admin,
-        //permissions: [{ roleName: 'Reader', scope: defaultScope }],
-    });
-    //ReadOnly
-    const readOnlyGroup = (0, Role_1.default)({
-        ...vaultRoleConfig.readOnly,
-        //permissions: [{ roleName: 'Reader', scope: defaultScope }],
-        members: [adminGroup.objectId],
-    });
-    //Add Global ADO Identity as Admin
-    const ado = (0, AzDevOps_1.getAdoIdentity)();
-    (0, Group_1.addMemberToGroup)({
-        name: "ado-admin-role",
-        groupObjectId: adminGroup.objectId,
-        objectId: ado.principal.objectId,
-    });
-    return { adminGroup, readOnlyGroup };
-};
-exports.createVaultRoles = createVaultRoles;
-//# sourceMappingURL=data:application/json;base64,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

package/AzAd/ManagedIdentity.d.ts

@@ -1,6 +0,0 @@
-import { BasicResourceArgs } from '../types';
-interface Props extends BasicResourceArgs {
-    lock?: boolean;
-}
-declare const _default: ({ name, group, lock }: Props) => import("@pulumi/azure-native/managedidentity/userAssignedIdentity").UserAssignedIdentity;
-export default _default;

package/AzAd/ManagedIdentity.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const azure = require("@pulumi/azure-native");
-const Naming_1 = require("../Common/Naming");
-const Locker_1 = require("../Core/Locker");
-exports.default = ({ name, group, lock }) => {
-    const n = (0, Naming_1.getManagedIdentityName)(name);
-    const managedIdentity = new azure.managedidentity.UserAssignedIdentity(n, {
-        resourceName: n,
-        ...group,
-    });
-    if (lock) {
-        (0, Locker_1.default)({
-            name: n,
-            resource: managedIdentity,
-        });
-    }
-    return managedIdentity;
-};
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiTWFuYWdlZElkZW50aXR5LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL0F6QWQvTWFuYWdlZElkZW50aXR5LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQ0EsOENBQThDO0FBQzlDLDZDQUEwRDtBQUMxRCwyQ0FBb0M7QUFNcEMsa0JBQWUsQ0FBQyxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsSUFBSSxFQUFTLEVBQUUsRUFBRTtJQUM5QyxNQUFNLENBQUMsR0FBRyxJQUFBLCtCQUFzQixFQUFDLElBQUksQ0FBQyxDQUFDO0lBQ3ZDLE1BQU0sZUFBZSxHQUFHLElBQUksS0FBSyxDQUFDLGVBQWUsQ0FBQyxvQkFBb0IsQ0FBQyxDQUFDLEVBQUU7UUFDeEUsWUFBWSxFQUFFLENBQUM7UUFDZixHQUFHLEtBQUs7S0FDVCxDQUFDLENBQUM7SUFFSCxJQUFJLElBQUksRUFBRSxDQUFDO1FBQ1QsSUFBQSxnQkFBTSxFQUFDO1lBQ0wsSUFBSSxFQUFFLENBQUM7WUFDUCxRQUFRLEVBQUUsZUFBZTtTQUMxQixDQUFDLENBQUM7SUFDTCxDQUFDO0lBRUQsT0FBTyxlQUFlLENBQUM7QUFDekIsQ0FBQyxDQUFDIn0=

package/AzAd/UserIdentity.d.ts

@@ -1,5 +0,0 @@
-import { BasicResourceArgs } from "../types";
-interface Props extends BasicResourceArgs {
-}
-declare const _default: ({ name, group }: Props) => import("@pulumi/azure-native/managedidentity/userAssignedIdentity").UserAssignedIdentity;
-export default _default;

package/AzAd/UserIdentity.js

@@ -1,12 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const managedidentity = require("@pulumi/azure-native/managedidentity");
-const Naming_1 = require("../Common/Naming");
-exports.default = ({ name, group }) => {
-    name = (0, Naming_1.getIdentityName)(name);
-    return new managedidentity.UserAssignedIdentity(name, {
-        resourceName: name,
-        ...group,
-    });
-};
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiVXNlcklkZW50aXR5LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL0F6QWQvVXNlcklkZW50aXR5LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQ0Esd0VBQXdFO0FBQ3hFLDZDQUFtRDtBQUluRCxrQkFBZSxDQUFDLEVBQUUsSUFBSSxFQUFFLEtBQUssRUFBUyxFQUFFLEVBQUU7SUFDeEMsSUFBSSxHQUFHLElBQUEsd0JBQWUsRUFBQyxJQUFJLENBQUMsQ0FBQztJQUM3QixPQUFPLElBQUksZUFBZSxDQUFDLG9CQUFvQixDQUFDLElBQUksRUFBRTtRQUNwRCxZQUFZLEVBQUUsSUFBSTtRQUNsQixHQUFHLEtBQUs7S0FDVCxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUMifQ==

package/Common/Naming/AzureRegions.d.ts

@@ -1,4 +0,0 @@
-export declare const azRegions: {
-    region: string;
-    code: string;
-}[];