diff --git a/workload/arm/deploy-baseline.json b/workload/arm/deploy-baseline.json index 492a923d7..65314ae69 100644 --- a/workload/arm/deploy-baseline.json +++ b/workload/arm/deploy-baseline.json @@ -4,8 +4,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "17413123010299282506" + "version": "0.30.23.60470", + "templateHash": "5937057250547040463" }, "name": "AVD Accelerator - Baseline Deployment", "description": "AVD Accelerator - Deployment Baseline", @@ -425,6 +425,13 @@ "description": "When true, Zone Redundant Storage (ZRS) is used, when set to false, Locally Redundant Storage (LRS) is used. (Default: false)" } }, + "deployVmssFlex": { + "type": "bool", + "defaultValue": true, + "metadata": { + "description": "Deploys a VMSS Flex group and associates session hosts with it for availability purposes. (Default: true)" + } + }, "vmssFlatformFaultDomainCount": { "type": "int", "defaultValue": 2, @@ -486,7 +493,7 @@ "type": "bool", "defaultValue": true, "metadata": { - "description": "Enables accelerated Networking on the session hosts.\r\nIf using a Azure Compute Gallery Image, the Image Definition must have been configured with\r\nthe \\'isAcceleratedNetworkSupported\\' property set to \\'true\\'.\r\n" + "description": "Enables accelerated Networking on the session hosts.\nIf using a Azure Compute Gallery Image, the Image Definition must have been configured with\nthe \\'isAcceleratedNetworkSupported\\' property set to \\'true\\'.\n" } }, "securityType": { @@ -929,6 +936,13 @@ "metadata": { "description": "Enable purge protection for the keyvaults. (Default: true)" } + }, + "deployAntiMalwareExt": { + "type": "bool", + "defaultValue": true, + "metadata": { + "description": "Deploys anti malware extension on session hosts. (Default: true)" + } } }, "variables": { @@ -1713,8 +1727,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10947076114802729857" + "version": "0.30.23.60470", + "templateHash": "8672838757620509839" }, "name": "Resource Groups", "description": "This module deploys a Resource Group.", @@ -1842,8 +1856,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10947076114802729857" + "version": "0.30.23.60470", + "templateHash": "8672838757620509839" }, "name": "Resource Groups", "description": "This module deploys a Resource Group.", @@ -1966,8 +1980,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10947076114802729857" + "version": "0.30.23.60470", + "templateHash": "8672838757620509839" }, "name": "Resource Groups", "description": "This module deploys a Resource Group.", @@ -2110,8 +2124,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "17514098676358837457" + "version": "0.30.23.60470", + "templateHash": "4236169587998799965" }, "name": "AVD LZA insights monitoring", "description": "This module deploys Log analytics workspace, DCR and policies", @@ -2248,8 +2262,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10947076114802729857" + "version": "0.30.23.60470", + "templateHash": "8672838757620509839" }, "name": "Resource Groups", "description": "This module deploys a Resource Group.", @@ -2382,8 +2396,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "4503325036957359192" + "version": "0.30.23.60470", + "templateHash": "15282002205908158597" }, "name": "Log Analytics Workspaces", "description": "This module deploys a Log Analytics Workspace.", @@ -2615,8 +2629,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "1745671120474305926" + "version": "0.30.23.60470", + "templateHash": "8028201980853199520" }, "name": "Log Analytics Workspace Storage Insight Configs", "description": "This module deploys a Log Analytics Workspace Storage Insight Config.", @@ -2815,8 +2829,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "4460810973313651780" + "version": "0.30.23.60470", + "templateHash": "14748218317477429392" } }, "parameters": { @@ -3144,8 +3158,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6034513017781008132" + "version": "0.30.23.60470", + "templateHash": "16641541366344144948" } }, "parameters": { @@ -3295,8 +3309,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "1091573741134375870" + "version": "0.30.23.60470", + "templateHash": "7209574149100326788" } }, "parameters": { @@ -3445,8 +3459,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "3879842459774615474" + "version": "0.30.23.60470", + "templateHash": "15074949129863647497" }, "name": "Policy Assignments (Resource Group scope)", "description": "This module deploys a Policy Assignment at a Resource Group scope.", @@ -3696,8 +3710,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "16756559229474193170" + "version": "0.30.23.60470", + "templateHash": "13526857440223039502" }, "name": "Policy Insights Remediations (Resource Group scope)", "description": "This module deploys a Policy Insights Remediation on a Resource Group scope.", @@ -3865,8 +3879,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "14436892319388563958" + "version": "0.30.23.60470", + "templateHash": "12831035809041306123" } }, "parameters": { @@ -4125,8 +4139,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "5780333613848864346" + "version": "0.30.23.60470", + "templateHash": "12834952427493062703" }, "name": "AVD LZA networking", "description": "This module deploys vNet, NSG, ASG, UDR, private DNs zones", @@ -4330,7 +4344,6 @@ "varExistingAvdVnetSubRgName": "[if(not(parameters('createVnet')), split(parameters('existingAvdSubnetResourceId'), '/')[4], '')]", "varExistingAvdVnetName": "[if(not(parameters('createVnet')), split(parameters('existingAvdSubnetResourceId'), '/')[8], '')]", "varExistingAvdVnetResourceId": "[if(not(parameters('createVnet')), format('/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.Network/virtualNetworks/{2}', variables('varExistingAvdVnetSubId'), variables('varExistingAvdVnetSubRgName'), variables('varExistingAvdVnetName')), '')]", - "varVnetDiagnosticSettings": "[if(and(not(empty(parameters('alaWorkspaceResourceId'))), equals(environment().name, 'AzureCloud')), createArray(createObject('workspaceResourceId', parameters('alaWorkspaceResourceId'))), if(and(not(empty(parameters('alaWorkspaceResourceId'))), not(equals(environment().name, 'AzureCloud'))), createArray(createObject('workspaceResourceId', parameters('alaWorkspaceResourceId'), 'logCategoriesAndGroups', createArray())), createArray()))]", "varDiagnosticSettings": "[if(not(empty(parameters('alaWorkspaceResourceId'))), createArray(createObject('workspaceResourceId', parameters('alaWorkspaceResourceId'))), createArray())]", "varWindowsActivationKMSPrefixesNsg": "[if(equals(variables('varAzureCloudName'), 'AzureCloud'), createArray('20.118.99.224', '40.83.235.53', '23.102.135.246'), if(equals(variables('varAzureCloudName'), 'AzureUSGovernment'), createArray('23.97.0.13', '52.126.105.2'), if(equals(variables('varAzureCloudName'), 'AzureChinaCloud'), createArray('159.27.28.100', '163.228.64.161', '42.159.7.249'), createArray())))]", "varStaticRoutes": "[if(equals(variables('varAzureCloudName'), 'AzureCloud'), createArray(createObject('name', 'AVDServiceTraffic', 'properties', createObject('addressPrefix', 'WindowsVirtualDesktop', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'AVDStunTurnTraffic', 'properties', createObject('addressPrefix', '20.202.0.0/16', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS', 'properties', createObject('addressPrefix', '20.118.99.224/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS01', 'properties', createObject('addressPrefix', '40.83.235.53/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS02', 'properties', createObject('addressPrefix', '23.102.135.246/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet'))), if(equals(variables('varAzureCloudName'), 'AzureUSGovernment'), createArray(createObject('name', 'AVDServiceTraffic', 'properties', createObject('addressPrefix', 'WindowsVirtualDesktop', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'AVDStunTurnTraffic', 'properties', createObject('addressPrefix', '20.202.0.0/16', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS', 'properties', createObject('addressPrefix', '23.97.0.13/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS01', 'properties', createObject('addressPrefix', '52.126.105.2/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet'))), if(equals(variables('varAzureCloudName'), 'AzureChinaCloud'), createArray(createObject('name', 'AVDServiceTraffic', 'properties', createObject('addressPrefix', 'WindowsVirtualDesktop', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'AVDStunTurnTraffic', 'properties', createObject('addressPrefix', '20.202.0.0/16', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS', 'properties', createObject('addressPrefix', '159.27.28.100/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS01', 'properties', createObject('addressPrefix', '163.228.64.161/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet')), createObject('name', 'DirectRouteToKMS02', 'properties', createObject('addressPrefix', '42.159.7.249/32', 'hasBgpOverride', true(), 'nextHopType', 'Internet'))), createArray())))]", @@ -4497,8 +4510,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6231547581626142052" + "version": "0.30.23.60470", + "templateHash": "9920407814382381860" }, "name": "Network Security Groups", "description": "This module deploys a Network security Group (NSG).", @@ -4789,8 +4802,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "3458344774841300043" + "version": "0.30.23.60470", + "templateHash": "16552673174935421633" }, "name": "Network Security Group (NSG) Security Rules", "description": "This module deploys a Network Security Group (NSG) Security Rule.", @@ -5052,8 +5065,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6231547581626142052" + "version": "0.30.23.60470", + "templateHash": "9920407814382381860" }, "name": "Network Security Groups", "description": "This module deploys a Network security Group (NSG).", @@ -5344,8 +5357,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "3458344774841300043" + "version": "0.30.23.60470", + "templateHash": "16552673174935421633" }, "name": "Network Security Group (NSG) Security Rules", "description": "This module deploys a Network Security Group (NSG) Security Rule.", @@ -5601,8 +5614,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "14346700307055260528" + "version": "0.30.23.60470", + "templateHash": "10050047613520543656" }, "name": "Application Security Groups (ASG)", "description": "This module deploys an Application Security Group (ASG).", @@ -5731,8 +5744,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10721683583098206958" + "version": "0.30.23.60470", + "templateHash": "1228848793868473285" }, "name": "Route Tables", "description": "This module deploys a User Defined Route Table (UDR).", @@ -5938,8 +5951,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10721683583098206958" + "version": "0.30.23.60470", + "templateHash": "1228848793868473285" }, "name": "Route Tables", "description": "This module deploys a User Defined Route Table (UDR).", @@ -6139,8 +6152,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "17677855953223415327" + "version": "0.30.23.60470", + "templateHash": "510602938216253127" }, "name": "DDoS Protection Plans", "description": "This module deploys a DDoS Protection Plan.", @@ -6271,7 +6284,7 @@ "value": "[parameters('tags')]" }, "diagnosticSettings": { - "value": "[variables('varVnetDiagnosticSettings')]" + "value": "[variables('varDiagnosticSettings')]" } }, "template": { @@ -6281,8 +6294,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6731301106812673861" + "version": "0.30.23.60470", + "templateHash": "8852938365790433451" }, "name": "Virtual Networks", "description": "This module deploys a Virtual Network (vNet).", @@ -6652,8 +6665,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "16459761055284239647" + "version": "0.30.23.60470", + "templateHash": "17552535066446097605" }, "name": "Virtual Network Subnets", "description": "This module deploys a Virtual Network Subnet.", @@ -6978,8 +6991,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8623605979081822008" + "version": "0.30.23.60470", + "templateHash": "18422443457381833495" }, "name": "Virtual Network Peerings", "description": "This module deploys a Virtual Network Peering.", @@ -7123,8 +7136,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8623605979081822008" + "version": "0.30.23.60470", + "templateHash": "18422443457381833495" }, "name": "Virtual Network Peerings", "description": "This module deploys a Virtual Network Peering.", @@ -7321,8 +7334,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6513904023254352138" + "version": "0.30.23.60470", + "templateHash": "6447266220523423284" }, "name": "Private DNS Zones", "description": "This module deploys a Private DNS zone.", @@ -7432,8 +7445,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "1713449351614683457" + "version": "0.30.23.60470", + "templateHash": "5921383587154229928" }, "name": "Private DNS Zone Virtual Network Link", "description": "This module deploys a Private DNS Zone Virtual Network Link.", @@ -7606,8 +7619,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6513904023254352138" + "version": "0.30.23.60470", + "templateHash": "6447266220523423284" }, "name": "Private DNS Zones", "description": "This module deploys a Private DNS zone.", @@ -7717,8 +7730,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "1713449351614683457" + "version": "0.30.23.60470", + "templateHash": "5921383587154229928" }, "name": "Private DNS Zone Virtual Network Link", "description": "This module deploys a Private DNS Zone Virtual Network Link.", @@ -7982,8 +7995,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "1781002121814970387" + "version": "0.30.23.60470", + "templateHash": "12051878425942700880" }, "name": "AVD LZA management plane", "description": "This module deploys AVD workspace, host pool, application group scaling plan", @@ -8260,8 +8273,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8945175348693255996" + "version": "0.30.23.60470", + "templateHash": "6355038731996119089" }, "name": "Azure Virtual Desktop Host Pool", "description": "This module deploys an Azure Virtual Desktop Host Pool", @@ -8701,8 +8714,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "13669193223003287695" + "version": "0.30.23.60470", + "templateHash": "569336813477795175" }, "name": "Key Vault Secrets", "description": "This module deploys a Key Vault Secret.", @@ -9016,8 +9029,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "11570465226099822679" + "version": "0.30.23.60470", + "templateHash": "9477828647923017064" }, "name": "Azure Virtual Desktop Application Group", "description": "This module deploys an Azure Virtual Desktop Application Group.", @@ -9425,8 +9438,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10838639279177354544" + "version": "0.30.23.60470", + "templateHash": "2492935317086618448" }, "name": "Azure Virtual Desktop Application Group Application", "description": "This module deploys an Azure Virtual Desktop Application Group Application.", @@ -9628,8 +9641,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "4496623991262242009" + "version": "0.30.23.60470", + "templateHash": "7521925704419702572" }, "name": "Workspace", "description": "This module deploys an Azure Virtual Desktop Workspace.", @@ -9935,8 +9948,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6918598758552689482" + "version": "0.30.23.60470", + "templateHash": "1018572390956690547" }, "name": "Azure Virtual Desktop Scaling Plan", "description": "This module deploys an Azure Virtual Desktop Scaling Plan.", @@ -10324,8 +10337,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "12388793568431493624" + "version": "0.30.23.60470", + "templateHash": "961381357868342754" } }, "parameters": { @@ -10486,8 +10499,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "15471634163586951656" + "version": "0.30.23.60470", + "templateHash": "11803242017330059916" }, "name": "User Assigned Identities", "description": "This module deploys a User Assigned Identity.", @@ -10741,8 +10754,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -10919,8 +10932,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -11095,8 +11108,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -11270,8 +11283,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -11442,8 +11455,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -11614,8 +11627,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -11837,8 +11850,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "1465396880141233216" + "version": "0.30.23.60470", + "templateHash": "7394685528371599287" } }, "parameters": { @@ -12008,8 +12021,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6034513017781008132" + "version": "0.30.23.60470", + "templateHash": "16641541366344144948" } }, "parameters": { @@ -12168,8 +12181,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "3879842459774615474" + "version": "0.30.23.60470", + "templateHash": "15074949129863647497" }, "name": "Policy Assignments (Resource Group scope)", "description": "This module deploys a Policy Assignment at a Resource Group scope.", @@ -12420,8 +12433,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "16756559229474193170" + "version": "0.30.23.60470", + "templateHash": "13526857440223039502" }, "name": "Policy Insights Remediations (Resource Group scope)", "description": "This module deploys a Policy Insights Remediation on a Resource Group scope.", @@ -12609,8 +12622,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "3879842459774615474" + "version": "0.30.23.60470", + "templateHash": "15074949129863647497" }, "name": "Policy Assignments (Resource Group scope)", "description": "This module deploys a Policy Assignment at a Resource Group scope.", @@ -12861,8 +12874,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "16756559229474193170" + "version": "0.30.23.60470", + "templateHash": "13526857440223039502" }, "name": "Policy Insights Remediations (Resource Group scope)", "description": "This module deploys a Policy Insights Remediation on a Resource Group scope.", @@ -13026,8 +13039,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -13199,8 +13212,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -13368,8 +13381,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8632123358833248130" + "version": "0.30.23.60470", + "templateHash": "1227486639354850589" }, "name": "Role Assignments (Resource Group scope)", "description": "This module deploys a Role Assignment at a Resource Group scope.", @@ -13572,8 +13585,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "571191894865467239" + "version": "0.30.23.60470", + "templateHash": "5360722259128289781" } }, "parameters": { @@ -13724,8 +13737,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "18412957729950919619" + "version": "0.30.23.60470", + "templateHash": "3460005220614992836" }, "name": "Key Vaults", "description": "This module deploys a Key Vault.", @@ -14908,8 +14921,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "7494731697751039419" + "version": "0.30.23.60470", + "templateHash": "15469258025112973480" }, "name": "Key Vault Access Policies", "description": "This module deploys a Key Vault Access Policy.", @@ -15177,8 +15190,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "13669193223003287695" + "version": "0.30.23.60470", + "templateHash": "569336813477795175" }, "name": "Key Vault Secrets", "description": "This module deploys a Key Vault Secret.", @@ -15461,8 +15474,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "15035594688775880955" + "version": "0.30.23.60470", + "templateHash": "1250108206897734506" }, "name": "Key Vault Keys", "description": "This module deploys a Key Vault Key.", @@ -16512,8 +16525,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "15035594688775880955" + "version": "0.30.23.60470", + "templateHash": "1250108206897734506" }, "name": "Key Vault Keys", "description": "This module deploys a Key Vault Key.", @@ -16837,8 +16850,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10729183769151948018" + "version": "0.30.23.60470", + "templateHash": "6378481213650236557" }, "name": "Disk Encryption Sets", "description": "This module deploys a Disk Encryption Set. The module will attempt to set permissions on the provided Key Vault for any used user-assigned identity.", @@ -17067,8 +17080,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "7332173426743050645" + "version": "0.30.23.60470", + "templateHash": "1367133447919905968" } }, "parameters": { @@ -17155,8 +17168,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "11254343639333423548" + "version": "0.30.23.60470", + "templateHash": "17444618367982488496" }, "name": "Key Vault Access Policies", "description": "This module deploys a Key Vault Access Policy.", @@ -17509,8 +17522,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "18412957729950919619" + "version": "0.30.23.60470", + "templateHash": "3460005220614992836" }, "name": "Key Vaults", "description": "This module deploys a Key Vault.", @@ -18693,8 +18706,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "7494731697751039419" + "version": "0.30.23.60470", + "templateHash": "15469258025112973480" }, "name": "Key Vault Access Policies", "description": "This module deploys a Key Vault Access Policy.", @@ -18962,8 +18975,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "13669193223003287695" + "version": "0.30.23.60470", + "templateHash": "569336813477795175" }, "name": "Key Vault Secrets", "description": "This module deploys a Key Vault Secret.", @@ -19246,8 +19259,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "15035594688775880955" + "version": "0.30.23.60470", + "templateHash": "1250108206897734506" }, "name": "Key Vault Keys", "description": "This module deploys a Key Vault Key.", @@ -20315,8 +20328,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "254215699611608030" + "version": "0.30.23.60470", + "templateHash": "3237407790324423200" } }, "parameters": { @@ -20596,8 +20609,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8155975850841976759" + "version": "0.30.23.60470", + "templateHash": "2803598175472441376" }, "name": "Virtual Machines", "description": "This module deploys a Virtual Machine with one or multiple NICs and optionally one or multiple public IPs.", @@ -21426,8 +21439,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10572916853077745487" + "version": "0.30.23.60470", + "templateHash": "499916289263126031" } }, "definitions": { @@ -22979,8 +22992,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -23188,8 +23201,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -23392,8 +23405,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -23603,8 +23616,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -23807,8 +23820,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -24008,8 +24021,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -24312,8 +24325,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "9332074825075946878" + "version": "0.30.23.60470", + "templateHash": "17363399843620349152" }, "name": "AVD LZA storage", "description": "This module deploys storage account, azure files. domain join logic", @@ -24582,8 +24595,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "9165357988035054854" + "version": "0.30.23.60470", + "templateHash": "10020046199410134923" }, "name": "Storage Accounts", "description": "This module deploys a Storage Account.", @@ -26103,8 +26116,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "2954888723763555398" + "version": "0.30.23.60470", + "templateHash": "12532433520125716194" }, "name": "Storage Account File Share Services", "description": "This module deploys a Storage Account File Share Service.", @@ -26384,8 +26397,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10317910753548703833" + "version": "0.30.23.60470", + "templateHash": "8149592214225924460" }, "name": "Storage Account File Shares", "description": "This module deploys a Storage Account File Share.", @@ -26584,8 +26597,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "17248286354721497939" + "version": "0.30.23.60470", + "templateHash": "12442072449730867756" } }, "parameters": { @@ -26908,8 +26921,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "17305671824680368975" + "version": "0.30.23.60470", + "templateHash": "1689212129910611066" }, "name": "AVD LZA storage", "description": "Configures domain join settings on storage account via VM custom script extension", @@ -27009,8 +27022,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -27276,8 +27289,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "9332074825075946878" + "version": "0.30.23.60470", + "templateHash": "17363399843620349152" }, "name": "AVD LZA storage", "description": "This module deploys storage account, azure files. domain join logic", @@ -27546,8 +27559,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "9165357988035054854" + "version": "0.30.23.60470", + "templateHash": "10020046199410134923" }, "name": "Storage Accounts", "description": "This module deploys a Storage Account.", @@ -29067,8 +29080,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "2954888723763555398" + "version": "0.30.23.60470", + "templateHash": "12532433520125716194" }, "name": "Storage Account File Share Services", "description": "This module deploys a Storage Account File Share Service.", @@ -29348,8 +29361,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10317910753548703833" + "version": "0.30.23.60470", + "templateHash": "8149592214225924460" }, "name": "Storage Account File Shares", "description": "This module deploys a Storage Account File Share.", @@ -29548,8 +29561,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "17248286354721497939" + "version": "0.30.23.60470", + "templateHash": "12442072449730867756" } }, "parameters": { @@ -29872,8 +29885,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "17305671824680368975" + "version": "0.30.23.60470", + "templateHash": "1689212129910611066" }, "name": "AVD LZA storage", "description": "Configures domain join settings on storage account via VM custom script extension", @@ -29973,8 +29986,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -30149,7 +30162,7 @@ ] }, { - "condition": "[parameters('avdDeploySessionHosts')]", + "condition": "[and(parameters('avdDeploySessionHosts'), parameters('deployVmssFlex'))]", "type": "Microsoft.Resources/deployments", "apiVersion": "2022-09-01", "name": "[format('AVD-VMSS-Flex-{0}', parameters('time'))]", @@ -30184,8 +30197,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "11757932224469015605" + "version": "0.30.23.60470", + "templateHash": "10966017454446351575" }, "name": "AVD Accelerator - VMSS Flex", "description": "Deploys a VMSS Flex without VM profile", @@ -30291,6 +30304,9 @@ "vmssFlexNamePrefix": { "value": "[variables('varVmssFlexNamePrefix')]" }, + "useVmssFlex": { + "value": "[parameters('deployVmssFlex')]" + }, "batchId": { "value": "[sub(range(1, variables('varSessionHostBatchCount'))[copyIndex()], 1)]" }, @@ -30381,7 +30397,10 @@ "value": "[parameters('avdDeployMonitoring')]" }, "alaWorkspaceResourceId": "[if(parameters('avdDeployMonitoring'), if(parameters('deployAlaWorkspace'), createObject('value', reference(subscriptionResourceId('Microsoft.Resources/deployments', format('Monitoring-{0}', parameters('time'))), '2022-09-01').outputs.avdAlaWorkspaceResourceId.value), createObject('value', parameters('alaExistingWorkspaceResourceId'))), createObject('value', ''))]", - "dataCollectionRuleId": "[if(parameters('avdDeployMonitoring'), createObject('value', reference(subscriptionResourceId('Microsoft.Resources/deployments', format('Monitoring-{0}', parameters('time'))), '2022-09-01').outputs.dataCollectionRuleId.value), createObject('value', ''))]" + "dataCollectionRuleId": "[if(parameters('avdDeployMonitoring'), createObject('value', reference(subscriptionResourceId('Microsoft.Resources/deployments', format('Monitoring-{0}', parameters('time'))), '2022-09-01').outputs.dataCollectionRuleId.value), createObject('value', ''))]", + "deployAntiMalwareExt": { + "value": "[parameters('deployAntiMalwareExt')]" + } }, "template": { "$schema": "https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#", @@ -30389,8 +30408,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "15745844634886577488" + "version": "0.30.23.60470", + "templateHash": "16948281966398873853" } }, "parameters": { @@ -30454,6 +30473,12 @@ "description": "Quantity of session hosts to deploy." } }, + "useVmssFlex": { + "type": "bool", + "metadata": { + "description": "Associate VMs with VMSS Flex group." + } + }, "maxVmssFlexMembersCount": { "type": "int", "metadata": { @@ -30638,7 +30663,7 @@ "deployMonitoring": { "type": "bool", "metadata": { - "description": "Deploy AVD monitoring resources and setings. (Default: true)" + "description": "Deploy AVD monitoring resources and setings." } }, "time": { @@ -30653,6 +30678,12 @@ "metadata": { "description": "Data collection rule ID." } + }, + "deployAntiMalwareExt": { + "type": "bool", + "metadata": { + "description": "Deploys anti malware extension on session hosts." + } } }, "variables": { @@ -30700,9 +30731,7 @@ "encryptionAtHost": { "value": "[parameters('encryptionAtHost')]" }, - "virtualMachineScaleSetResourceId": { - "value": "[format('/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.Compute/virtualMachineScaleSets/{2}-{3}', parameters('subscriptionId'), parameters('computeObjectsRgName'), parameters('vmssFlexNamePrefix'), padLeft(add(1, div(add(range(1, parameters('count'))[copyIndex()], parameters('countIndex')), parameters('maxVmssFlexMembersCount'))), 3, '0'))]" - }, + "virtualMachineScaleSetResourceId": "[if(parameters('useVmssFlex'), createObject('value', format('/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.Compute/virtualMachineScaleSets/{2}-{3}', parameters('subscriptionId'), parameters('computeObjectsRgName'), parameters('vmssFlexNamePrefix'), padLeft(add(1, div(add(range(1, parameters('count'))[copyIndex()], parameters('countIndex')), parameters('maxVmssFlexMembersCount'))), 3, '0'))), createObject('value', ''))]", "osType": { "value": "Windows" }, @@ -30781,8 +30810,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8155975850841976759" + "version": "0.30.23.60470", + "templateHash": "2803598175472441376" }, "name": "Virtual Machines", "description": "This module deploys a Virtual Machine with one or multiple NICs and optionally one or multiple public IPs.", @@ -31611,8 +31640,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10572916853077745487" + "version": "0.30.23.60470", + "templateHash": "499916289263126031" } }, "definitions": { @@ -33164,8 +33193,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -33373,8 +33402,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -33577,8 +33606,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -33788,8 +33817,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -33992,8 +34021,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -34193,8 +34222,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -34398,6 +34427,7 @@ "name": "sessionHostsAntimalwareExtension", "count": "[length(range(1, parameters('count')))]" }, + "condition": "[parameters('deployAntiMalwareExt')]", "type": "Microsoft.Resources/deployments", "apiVersion": "2022-09-01", "name": "[format('SH-Antimal-{0}-{1}-{2}', parameters('batchId'), sub(range(1, parameters('count'))[copyIndex()], 1), parameters('time'))]", @@ -34454,8 +34484,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -34671,8 +34701,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "10657605324993327332" + "version": "0.30.23.60470", + "templateHash": "16065702394900050638" }, "name": "Virtual Machine Extensions", "description": "This module deploys a Virtual Machine Extension.", @@ -34859,8 +34889,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "15961062277630290779" + "version": "0.30.23.60470", + "templateHash": "3162213164155283873" } }, "parameters": { @@ -34957,8 +34987,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "7216705815368457530" + "version": "0.30.23.60470", + "templateHash": "11404025400543455992" } }, "parameters": { @@ -35128,8 +35158,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "8773131658786941342" + "version": "0.30.23.60470", + "templateHash": "12070773277688568193" } }, "parameters": { @@ -35218,8 +35248,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "6034513017781008132" + "version": "0.30.23.60470", + "templateHash": "16641541366344144948" } }, "parameters": { @@ -35364,8 +35394,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "3879842459774615474" + "version": "0.30.23.60470", + "templateHash": "15074949129863647497" }, "name": "Policy Assignments (Resource Group scope)", "description": "This module deploys a Policy Assignment at a Resource Group scope.", @@ -35615,8 +35645,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.29.47.4906", - "templateHash": "16756559229474193170" + "version": "0.30.23.60470", + "templateHash": "13526857440223039502" }, "name": "Policy Insights Remediations (Resource Group scope)", "description": "This module deploys a Policy Insights Remediation on a Resource Group scope.",