Private/Tests/Cleanup/Remove-AvmBicepResource.ps1
|
function Remove-AvmBicepResource { [CmdletBinding(SupportsShouldProcess)] param ( [Parameter(Mandatory = $true)] [string] $ResourceId, [Parameter(Mandatory = $true)] [string] $Type ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Type -ieq 'Microsoft.Authorization/roleAssignments') { $resource = ConvertTo-AvmBicepCleanupResource -ResourceIds @($ResourceId) $assignmentId = [guid]::Empty if ($resource.type -ine $Type -or -not [guid]::TryParseExact($ResourceId.Split('/')[-1], 'D', [ref]$assignmentId)) { throw [AvmConfigurationException]::new('Role-assignment cleanup requires an exact ARM role assignment ID ending in a GUID.') } } if (-not $PSCmdlet.ShouldProcess($ResourceId, 'Remove Bicep test resource')) { return } if ($PSCmdlet.ShouldProcess("Possible locks on resource with ID [$ResourceId]", 'Handle')) { Remove-AvmBicepResourceLock -ResourceId $ResourceId -Type $Type } switch ($Type) { 'Microsoft.Insights/diagnosticSettings' { $parentResourceId = $ResourceId.Substring( 0, $ResourceId.LastIndexOf('/providers/', [System.StringComparison]::OrdinalIgnoreCase)) $resourceName = $ResourceId.Split('/')[-1] if ($PSCmdlet.ShouldProcess("Diagnostic setting [$resourceName]", 'Remove')) { $null = Remove-AzDiagnosticSetting -ResourceId $parentResourceId -Name $resourceName } break } 'Microsoft.Authorization/locks' { if ($PSCmdlet.ShouldProcess("Lock with ID [$ResourceId]", 'Remove')) { Remove-AvmBicepResourceLock -ResourceId $ResourceId -Type $Type } break } 'Microsoft.KeyVault/vaults/keys' { $resourceName = $ResourceId.Split('/')[-1] Write-Verbose ('[/] Skipping resource [{0}] of type [{1}]. Reason: It is handled by different logic.' -f $resourceName, $Type) -Verbose break } 'Microsoft.KeyVault/vaults/accessPolicies' { $resourceName = $ResourceId.Split('/')[-1] Write-Verbose ('[/] Skipping resource [{0}] of type [{1}]. Reason: It is handled by different logic.' -f $resourceName, $Type) -Verbose break } 'Microsoft.KeyVault/managedHSMs/keys' { $parentName = $ResourceId.Split('/')[8] $resourceName = $ResourceId.Split('/')[-1] $hSMKeyUri = 'https://{0}.managedhsm.azure.net/keys/{1}' -f $parentName, $resourceName if ($PSCmdlet.ShouldProcess("Managed HSM key [$hSMKeyUri]", 'Remove')) { $hSMKeyApiUri = '{0}?api-version=2025-05-01' -f $hSMKeyUri $removeRequestInputObject = @{ Method = 'DELETE' Uri = $hSMKeyApiUri } $hSMKeyState = Invoke-AzRestMethod @removeRequestInputObject $hSMKeyStateContent = $hSMKeyState.Content | ConvertFrom-Json if ($hSMKeyState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $hSMKeyStateContent.error.code, $hSMKeyStateContent.error.message))) } } break } 'Microsoft.ServiceBus/namespaces/authorizationRules' { if ($ResourceId.Split('/')[-1] -eq 'RootManageSharedAccessKey') { Write-Verbose ('[/] Skipping resource [RootManageSharedAccessKey] of type [{0}]. Reason: The Service Bus''s default authorization key cannot be removed' -f $Type) -Verbose } else { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } } break } 'Microsoft.Compute/diskEncryptionSets' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $diskEncryptionSet = Get-AzDiskEncryptionSet -Name $resourceName -ResourceGroupName $resourceGroupName $keyVaultResourceId = $diskEncryptionSet.ActiveKey.SourceVault.Id $keyVaultName = $keyVaultResourceId.Split('/')[-1] $objectId = $diskEncryptionSet.Identity.PrincipalId if ($PSCmdlet.ShouldProcess(('Access policy [{0}] from key vault [{1}]' -f $objectId, $keyVaultName), 'Remove')) { $null = Remove-AzKeyVaultAccessPolicy -VaultName $keyVaultName -ObjectId $objectId } if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } break } 'Microsoft.RecoveryServices/vaults/backupstorageconfig' { break } 'Microsoft.Authorization/roleAssignments' { if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove role assignment')) { $response = Invoke-AzRestMethod -Method DELETE -Path "$($ResourceId)?api-version=2022-04-01" -ErrorAction Stop $status = Get-AvmPropertyValue -InputObject $response -Name StatusCode -NoEnumerate if (($status -isnot [int] -and $status -isnot [System.Net.HttpStatusCode]) -or $status -notin @(200, 204, 404)) { throw [AvmProcessException]::new('ARM did not confirm removal or absence of the recorded role assignment.') } } break } 'Microsoft.Authorization/roleEligibilityScheduleRequests' { $idElem = $ResourceId.Split('/') $scope = $idElem[0..($idElem.Count - 5)] -join '/' if ([string]::IsNullOrEmpty($scope)) { $scope = '/' } $pimRequestName = $idElem[-1] $pimRoleAssignment = Get-AzRoleEligibilityScheduleRequest -Scope $scope -Name $pimRequestName if ($pimRoleAssignment) { $pimRoleAssignmentPrinicpalId = $pimRoleAssignment.PrincipalId $pimRoleAssignmentRoleDefinitionId = $pimRoleAssignment.RoleDefinitionId $guid = New-Guid Write-Verbose 'Waiting for 5 minutes before removing PIM role assignment' -Verbose Start-Sleep -Seconds 300 $removalInputObject = @{ Name = $guid Scope = $scope PrincipalId = $pimRoleAssignmentPrinicpalId RequestType = 'AdminRemove' RoleDefinitionId = $pimRoleAssignmentRoleDefinitionId } if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove role eligibility')) { $null = New-AzRoleEligibilityScheduleRequest @removalInputObject } } break } 'Microsoft.Authorization/roleAssignmentScheduleRequests' { $idElem = $ResourceId.Split('/') $scope = $idElem[0..($idElem.Count - 5)] -join '/' if ([string]::IsNullOrEmpty($scope)) { $scope = '/' } $pimRequestName = $idElem[-1] $pimRoleAssignment = Get-AzRoleAssignmentScheduleRequest -Scope $scope -Name $pimRequestName if ($pimRoleAssignment) { $pimRoleAssignmentPrinicpalId = $pimRoleAssignment.PrincipalId $pimRoleAssignmentRoleDefinitionId = $pimRoleAssignment.RoleDefinitionId $guid = New-Guid Write-Verbose 'Waiting for 5 minutes before removing PIM role assignment' -Verbose Start-Sleep -Seconds 300 $removalInputObject = @{ Name = $guid Scope = $scope PrincipalId = $pimRoleAssignmentPrinicpalId RequestType = 'AdminRemove' RoleDefinitionId = $pimRoleAssignmentRoleDefinitionId } if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove scheduled role assignment')) { $null = New-AzRoleAssignmentScheduleRequest @removalInputObject } } break } 'Microsoft.Cdn/profiles' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $cdnProfile = Invoke-AvmBicepCleanupCli -ArgumentList @( 'cdn', 'profile', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if ($cdnProfile) { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'cdn', 'profile', 'delete', '--resource-group', $resourceGroupName, '--name', $resourceName ) } } else { Write-Warning "Unable to find CDN profile [$resourceName] in resource group [$resourceGroupName]" } break } 'Microsoft.RecoveryServices/vaults' { if ((Get-AzRecoveryServicesVaultProperty -VaultId $ResourceId).SoftDeleteFeatureState -ne 'Disabled') { if ($PSCmdlet.ShouldProcess(('Soft-delete on RSV [{0}]' -f $ResourceId), 'Set')) { $null = Set-AzRecoveryServicesVaultProperty -VaultId $ResourceId -SoftDeleteFeatureState 'Disable' } } $backupItems = Get-AzRecoveryServicesBackupItem -BackupManagementType 'AzureVM' -WorkloadType 'AzureVM' -VaultId $ResourceId foreach ($backupItem in $backupItems) { Write-Verbose ('Removing Backup item [{0}] from RSV [{1}]' -f $backupItem.Name, $ResourceId) -Verbose if ($backupItem.DeleteState -eq 'ToBeDeleted') { if ($PSCmdlet.ShouldProcess('Soft-deleted backup data removal', 'Undo')) { $null = Undo-AzRecoveryServicesBackupItemDeletion -Item $backupItem -VaultId $ResourceId -Force } } if ($PSCmdlet.ShouldProcess(('Backup item [{0}] from RSV [{1}]' -f $backupItem.Name, $ResourceId), 'Remove')) { $null = Disable-AzRecoveryServicesBackupProtection -Item $backupItem -VaultId $ResourceId -RemoveRecoveryPoints -Force } } if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } break } 'Microsoft.DataProtection/backupVaults' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $vault = Get-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName if ($vault.ImmutabilityState -ne 'Disabled') { Write-Verbose (' [-] Disabling immutability on vault [{0}]' -f $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Immutability on vault [{0}]' -f $resourceName), 'Update')) { $null = Update-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName -ImmutabilityState Disabled } } if ($vault.SoftDeleteState -ne 'Off') { Write-Verbose (' [-] Disabling soft-deletion on vault [{0}]' -f $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Soft-delete on vault [{0}]' -f $resourceName), 'Update')) { $null = Update-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName -SoftDeleteState Off } } $softDeletedBackupInstances = Get-AzDataProtectionSoftDeletedBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($softDeletedBackupInstance in $softDeletedBackupInstances) { Write-Verbose (' [-] Removing Backup instance soft deletion [{0}] from vault [{1}]' -f $softDeletedBackupInstance.Name, $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Soft deletion on backup instance [{0}] from vault [{1}]' -f $softDeletedBackupInstance.Name, $resourceName), 'Undo')) { $null = Undo-AzDataProtectionBackupInstanceDeletion -ResourceGroupName $resourceGroupName -VaultName $resourceName -BackupInstanceName $softDeletedBackupInstance.name } } $backupInstances = Get-AzDataProtectionBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($backupInstance in $backupInstances) { Write-Verbose (' [-] Removing Backup instance [{0}] from vault [{1}]' -f $backupInstance.Name, $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Backup instance [{0}] from vault [{1}]' -f $backupInstance.Name, $resourceName), 'Remove')) { $null = Remove-AzDataProtectionBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName -Name $backupInstance.name } } $backupPolicies = Get-AzDataProtectionBackupPolicy -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($backupPolicy in $backupPolicies) { Write-Verbose (' [-] Removing Backup policy [{0}] from vault [{1}]' -f $backupPolicy.Name, $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Backup instance [{0}] from vault [{1}]' -f $backupPolicy.Name, $resourceName), 'Remove')) { $null = Remove-AzDataProtectionBackupPolicy -ResourceGroupName $resourceGroupName -VaultName $resourceName -Name $backupPolicy.name } } Write-Verbose (' [-] Removing Backup vault [{0}]' -f $resourceName) -Verbose if ($PSCmdlet.ShouldProcess("Backup vault with ID [$ResourceId]", 'Remove')) { $null = Remove-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName } break } 'Microsoft.OperationalInsights/workspaces' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] $workspaceApiPath = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.OperationalInsights/workspaces/{2}?api-version=2025-02-01' -f $subscriptionId, $resourceGroupName, $resourceName $getWorkspaceStateInputObject = @{ Method = 'GET' Path = $workspaceApiPath } $workspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $workspaceState.Content | ConvertFrom-Json if ($workspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } $replication = Get-AvmPropertyValue -InputObject $workspaceStateContent.properties -Name 'replication' if (Get-AvmPropertyValue -InputObject $replication -Name 'enabled') { $retryCount = 1 $retryLimit = 90 $retryInterval = 60 $replicationCreated = [DateTime]$workspaceStateContent.properties.replication.createdDate $replicationFullyProvisioned = $false do { if ([DateTime]::UtcNow -lt $replicationCreated.AddHours(1)) { $timeLeft = [int]($replicationCreated.AddHours(1) - [DateTime]::UtcNow).TotalSeconds Write-Verbose (' [progress] Waiting {0} minutes to ensure at least 1 hour has passed since replication creation time [{1}] (UTC).' -f [int]($timeLeft / 60), $replicationCreated) -Verbose Start-Sleep -Seconds ([int]$timeLeft + 10) $retryCount++ continue } $getWorkspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $getWorkspaceState.Content | ConvertFrom-Json if ($getWorkspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } if ($workspaceStateContent.properties.replication.provisioningState -eq 'Succeeded') { Write-Verbose (' [progress] Workspace replication is in a state that allows disabling.') -Verbose $replicationFullyProvisioned = $true break } else { $replicationFullyProvisioned = $false Write-Verbose (' [progress] Waiting {0} seconds for workspace replication to finish provisioning. [{1}/{2}]' -f $retryInterval, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval $retryCount++ } } while (-not $replicationFullyProvisioned -and $retryCount -lt $retryLimit) if (-not $replicationFullyProvisioned) { throw [AvmProcessException]::new("Workspace replication did not finish provisioning: $ResourceId") } $disableReplicationInputObject = @{ Method = 'PUT' Path = $workspaceApiPath Payload = @{ properties = @{ replication = @{ enabled = $false } } location = $workspaceStateContent.location } | ConvertTo-Json -Depth 10 } Write-Verbose ('[*] Disabling workspace replication for resource [{0}] of type [{1}]' -f $resourceName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Log Analytics Workspace [$resourceName]", 'Disable replication')) { $disableReplicationResponse = Invoke-AzRestMethod @disableReplicationInputObject if ($disableReplicationResponse.StatusCode -notlike '2*') { $responseContent = $disableReplicationResponse.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 1 $retryLimit = 240 $retryInterval = 15 do { $getWorkspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $getWorkspaceState.Content | ConvertFrom-Json if ($getWorkspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } if (-not $workspaceStateContent.properties.replication.enabled -and $workspaceStateContent.properties.replication.provisioningState -eq 'Succeeded') { Write-Verbose (' [progress] Workspace replication is disabled.') -Verbose break } else { Write-Verbose (' [progress] Waiting {0} seconds for workspace replication to be disabled. [{1}/{2}]' -f $retryInterval, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval $retryCount++ } } while (($workspaceStateContent.properties.replication.enabled -or $workspaceStateContent.properties.replication.provisioningState -ne 'Succeeded') -and $retryCount -lt $retryLimit) Start-Sleep -Seconds 30 if ($workspaceStateContent.properties.replication.enabled -or $workspaceStateContent.properties.replication.provisioningState -ne 'Succeeded') { throw [AvmProcessException]::new("Workspace replication could not be disabled: $ResourceId") } } } if ($PSCmdlet.ShouldProcess("Log Analytics Workspace [$resourceName]", 'Remove')) { Write-Verbose ('[*] Purging resource [{0}] of type [{1}]' -f $resourceName, $Type) -Verbose $null = Remove-AzOperationalInsightsWorkspace -ResourceGroupName $resourceGroupName -Name $resourceName -Force -ForceDelete } break } 'Microsoft.VirtualMachineImages/imageTemplates' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] if ($PSCmdlet.ShouldProcess("Image Template [$resourceName]", 'Remove')) { $removeRequestInputObject = @{ Method = 'DELETE' Path = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.VirtualMachineImages/imageTemplates/{2}?api-version=2022-07-01' -f $subscriptionId, $resourceGroupName, $resourceName } $removalResponse = Invoke-AzRestMethod @removeRequestInputObject if ($removalResponse.StatusCode -notlike '2*') { $responseContent = $removalResponse.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 0 $retryLimit = 240 $retryInterval = 15 do { $retryCount++ $getRequestInputObject = @{ Method = 'GET' Path = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.VirtualMachineImages/imageTemplates/{2}?api-version=2022-07-01' -f $subscriptionId, $resourceGroupName, $resourceName } $getResponse = Invoke-AzRestMethod @getRequestInputObject if ($getResponse.StatusCode -eq 400) { throw [AvmProcessException]::new([string](($getResponse.Content | ConvertFrom-Json).error.message)) } elseif ($getResponse.StatusCode -eq 404) { $templateExists = $false } elseif ($getResponse.StatusCode -eq '200') { $templateExists = $true Write-Verbose (' [progress] Waiting {0} seconds for Image Template to be removed. [{1}/{2}]' -f $retryInterval, $retryCount, $retryLimit) -Verbose if ($retryCount -lt $retryLimit) { Start-Sleep -Seconds $retryInterval } } else { throw [AvmProcessException]::new( "Image template lookup failed with HTTP $($getResponse.StatusCode): $ResourceId") } } while ($templateExists -and $retryCount -lt $retryLimit) if ($templateExists) { throw [AvmProcessException]::new("Image template deletion did not finish: $ResourceId") } } break } 'Microsoft.MachineLearningServices/workspaces' { $subscriptionId = $ResourceId.Split('/')[2] $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $purgePath = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.MachineLearningServices/workspaces/{2}?api-version=2023-06-01-preview&forceToPurge=true' -f $subscriptionId, $resourceGroupName, $resourceName $purgeRequestInputObject = @{ Method = 'DELETE' Path = $purgePath } Write-Verbose ('[*] Purging resource [{0}] of type [{1}]' -f $resourceName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Machine Learning Workspace [$resourceName]", 'Purge')) { $purgeResource = Invoke-AzRestMethod @purgeRequestInputObject if ($purgeResource.StatusCode -notlike '2*') { $responseContent = $purgeResource.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 0 $retryLimit = 240 $retryInterval = 15 do { $retryCount++ if ($retryCount -ge $retryLimit) { throw [AvmProcessException]::new("Machine Learning workspace purge did not finish: $ResourceId") } Write-Verbose (' [progress] Waiting {0} seconds for workspace to be purged.' -f $retryInterval) -Verbose Start-Sleep -Seconds $retryInterval $workspace = @(Invoke-AvmBicepCleanupLookup -Command 'Get-AzMLWorkspace' -Parameters @{ Name = $resourceName ResourceGroupName = $resourceGroupName SubscriptionId = $subscriptionId }) $workspaceExists = @($workspace | Where-Object { $null -ne $_ }).Count -gt 0 } while ($workspaceExists) } break } { $PSItem -eq 'Microsoft.Subscription/aliases' -and $ResourceId -like '*dep-sub-blzv-tests*' } { $subscriptionName = $ResourceId.Split('/')[4] $subscriptions = @(Get-AzSubscription | Where-Object { $_.Name -eq $subscriptionName }) if ($subscriptions.Count -ne 1) { throw [AvmProcessException]::new("Expected one subscription for alias '$subscriptionName'; found $($subscriptions.Count).") } $subscription = $subscriptions[0] $subscriptionId = $subscription.Id $subscriptionState = $subscription.State $null = Set-AzContext -SubscriptionId $subscriptionId -Scope Process -ErrorAction Stop if (Invoke-AvmBicepCleanupLookup -Command 'Get-AzResourceGroup' -Parameters @{ Name = 'NetworkWatcherRG' }) { if ($PSCmdlet.ShouldProcess('Resource Group [NetworkWatcherRG]', 'Remove')) { $null = Remove-AzResourceGroup -Name 'NetworkWatcherRG' -Force } } if (-not (Invoke-AvmBicepCleanupLookup -Command 'Get-AzManagementGroupSubscription' -Parameters @{ GroupName = 'bicep-lz-vending-automation-decom' SubscriptionId = $subscriptionId })) { Write-Verbose ('[*] Moving resource [{0}] of type [{1}] to management group: bicep-lz-vending-automation-decom' -f $subscriptionName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Subscription [$subscriptionName] to Management Group: bicep-lz-vending-automation-decom", 'Move')) { $null = New-AzManagementGroupSubscription -GroupName 'bicep-lz-vending-automation-decom' -SubscriptionId $subscriptionId } } if ($subscriptionState -eq 'Enabled') { Write-Verbose ('[*] Disabling resource [{0}] of type [{1}]' -f $subscriptionName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Subscription [$subscriptionName]", 'Remove')) { $null = Disable-AzSubscription -SubscriptionId $subscriptionId -Confirm:$false } } break } 'Microsoft.ApiManagement/service' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] $apimService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if ($apimService) { $apimLocation = ($apimService | ConvertFrom-Json).location $retryCount = 0 $retryLimit = 30 $retryInterval = 60 $deleteSucceeded = $false do { $retryCount++ Write-Verbose ('[*] Removing API Management service [{0}] from resource group [{1}] (attempt [{2}/{3}])' -f $resourceName, $resourceGroupName, $retryCount, $retryLimit) -Verbose if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Remove')) { $deleteOutput = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'delete', '--resource-group', $resourceGroupName, '--name', $resourceName, '--yes' ) -IgnoreExitCode if ($deleteOutput.ExitCode -eq 0) { $deleteSucceeded = $true Write-Verbose ('[progress] Successfully initiated deletion of API Management service [{0}]' -f $resourceName) -Verbose } else { $deleteOutputString = $deleteOutput.StdErr if ($deleteOutputString -match 'ServiceLocked|transitioning') { Write-Verbose (' [progress] API Management service [{0}] is transitioning. Waiting {1} seconds before retrying. [{2}/{3}]' -f $resourceName, $retryInterval, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval } else { throw [AvmProcessException]::new( "Failed to delete API Management service '$resourceName': $deleteOutputString") } } } else { break } } while (-not $deleteSucceeded -and $retryCount -lt $retryLimit) if (-not $deleteSucceeded) { if ($retryCount -ge $retryLimit) { throw [AvmProcessException]::new( "Failed to delete API Management service '$resourceName' after $retryCount attempts.") } break } $retryCount = 0 $retryLimit = 60 $retryInterval = 30 $serviceSoftDeleted = $false do { $retryCount++ $existingService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if (-not $existingService) { $serviceSoftDeleted = $true Write-Verbose ('[progress] API Management service [{0}] has been soft-deleted.' -f $resourceName) -Verbose } else { Write-Verbose (' [progress] Waiting {0} seconds for API Management service [{1}] to be soft-deleted. [{2}/{3}]' -f $retryInterval, $resourceName, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval } } while (-not $serviceSoftDeleted -and $retryCount -lt $retryLimit) if (-not $serviceSoftDeleted) { throw [AvmProcessException]::new( "API Management service '$resourceName' did not finish soft deletion.") } $softDeletedService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'show', '--service-name', $resourceName, '--location', $apimLocation ) -AllowNotFound if ($softDeletedService) { Write-Verbose ('[*] Purging soft-deleted API Management service [{0}] in location [{1}]' -f $resourceName, $apimLocation) -Verbose if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Purge')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'purge', '--service-name', $resourceName, '--location', $apimLocation ) } } else { Write-Verbose ('[/] No soft-deleted API Management service [{0}] found in location [{1}]. Skipping purge.' -f $resourceName, $apimLocation) -Verbose } } else { Write-Verbose ('[/] API Management service [{0}] not found in resource group [{1}]. Checking for soft-deleted instance.' -f $resourceName, $resourceGroupName) -Verbose $softDeletedServices = @(Get-AvmBicepCleanupRestCollection -Path ( "/subscriptions/$subscriptionId/providers/Microsoft.ApiManagement/deletedservices?api-version=2021-08-01" )) if ($softDeletedServices) { $matchingDeleted = $softDeletedServices | Where-Object { $_.properties.serviceId -ieq $ResourceId } if ($matchingDeleted) { $apimLocation = $matchingDeleted.location Write-Verbose ('[*] Purging soft-deleted API Management service [{0}] in location [{1}]' -f $resourceName, $apimLocation) -Verbose if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Purge')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'purge', '--service-name', $resourceName, '--location', $apimLocation ) } } else { Write-Warning "Unable to find API Management service [$resourceName] (active or soft-deleted)" } } } break } 'Microsoft.Network/expressRouteGateways' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] if ($PSCmdlet.ShouldProcess("Express Route Gateway [$resourceName]", 'Remove')) { $null = Remove-AzExpressRouteGateway -ResourceGroupName $resourceGroupName -Name $resourceName -Force -ErrorAction 'Stop' $retryCount = 0 $maxRetries = 60 do { $gateway = Invoke-AvmBicepCleanupLookup -Command 'Get-AzExpressRouteGateway' -Parameters @{ ResourceGroupName = $resourceGroupName Name = $resourceName } if ($gateway) { $retryCount++ Write-Verbose ("Express Route Gateway [$resourceName] still deleting. Waiting 30 seconds. [{0}/{1}]" -f $retryCount, $maxRetries) -Verbose Start-Sleep -Seconds 30 } } while ($gateway -and $retryCount -lt $maxRetries) if ($gateway) { throw [AvmProcessException]::new([string]("Express Route Gateway [$resourceName] did not finish deleting within the expected time.")) } } break } default { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } } } } # SIG # Begin signature block # MIInKgYJKoZIhvcNAQcCoIInGzCCJxcCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAfgq35IqlsbJau # g/GKHVaPwh57BGHp0io4Ho+x+5IJSqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnGMIIZwgIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEINsyYf6AWbA+rBS0rxrN2ZnPZazib4P1xNO6qwU8tj+CMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAqP8WVzhev6K+ir9m # YsW2E60HrqKR4r9Ve/OXNrS3VutrLfulrY5WXsfSklcq/PWQNwE1GUWW7+8vVDXN # zqc7PCM7nogmEzn8fCZl/3jxWFmYTtEsfE9Q5g51qLNsRbJNyKOspaQgaJGdgXGp # Hg6Ac9Py0CyqmmtWUqGnUUYoQJYmvTyt8UiETfQfNGTalYeqDmAmHFtc/OM3dH60 # 3ttpyBGqVInoXDK80b0lEjhFyZxyXdHqEQX0rsOT/sZozfbNvDzTyGYxnw/c8O/t # l5QJCnaL3Oi5E+yLOqDYdtzEoh90iZq+VR+kfTmV0ce4Lw2n0MY8W4Uv3bu1aVbP # 9ceL8aGCF5YwgheSBgorBgEEAYI3AwMBMYIXgjCCF34GCSqGSIb3DQEHAqCCF28w # ghdrAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8 # MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCAaxjw+N3hC3FbG # Ux1Ihr5Qum9FBQdRaj5uasJtP9ylHQIGarfyt/IgGBIyMDI2MTAyMTA4NTExOS4w # OVowBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAl # BgNVBAsTHm5TaGllbGQgVFNTIEVTTjozMzAzLTA1RTAtRDk0NzElMCMGA1UEAxMc # TWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEe0wggcgMIIFCKADAgECAhMz # AAACITPANfvSDyGkAAEAAAIhMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l # LVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5Mzk1NFoXDTI3MDUxNzE5Mzk1NFow # gcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsT # HE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQg # VFNTIEVTTjozMzAzLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUt # U3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANtx # MAKpTVi9GhzJYvY8v1/J//5QuzaortTVpmxGcNlKeUKvsruOADd4UIQkvkFnt1RM # LQN5l6l/5kL7scRsHgh3OYl9ABQMUV6upjlVMeZC8/ZcDeVZIWPvjSJ1wZQeCU/k # f89sIlTsYAdY/Yd1wKN3HWVgCjQD7MsjvHCdNB4zI5dfbXYSDhSYM88mDF1MzDpY # VVawE9ZEGLmAOLHLaz7tHwAOTmVsEEUMHmHQKOs1Yg3u4IDMXmDu2usvydcgqnXS # aP1HGFwZD62WG3pUi93KBFVNQZ3MUHb+cG8mpD2THEWW1BJPvR8R3HhPJoqjD9/n # 4FKHjPj/1/s1chVVMuf/yRwkB9GoWZGusW3cgpvLtWvOZi6hBYPSWY0W0ZDnsGsm # Q+s8UA96TUAu1xtvsUfedCm+LyeDP8wVf/5yeY0VYVTb1VUubMH1e8tnFti+R562 # 3SaHmV+1543asTBTKt2sq5/P2HZLqltq174LaHTYKtfBKRrTHp7OlOYaQgksW3bm # 5v9Rhc0t0d2zEYPoR9yQ4igliybgxL0X+9Kos0crz0jS9MsGeBASnosgWQg1qdFP # c+03Hek0pEolEAtzovqaFbiEvhocvvj2o99Dva3moAybnGIpgyAnZZqeJ1Es24jb # nUkg3utpp4D/a9vRcWRlwhtNHWl9AaxyjhTSDm2PAgMBAAGjggFJMIIBRTAdBgNV # HQ4EFgQU5iMizmprql+6q4/LIrUVOvlAMKcwHwYDVR0jBBgwFoAUn6cVXQBeYl2D # 9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3Nv # ZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUy # MDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDov # L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1l # LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUB # Af8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQAD # ggIBADgj/duR2dPEPasW6bcwXzFUp0SSiEA5tt4+tD7R+vltGKaPP2xWQpP/uByP # g4xwKVJgb4h1foyncRiwsdZ+O/B/MWh5kT7JNt0GP/VUdlBG4KbDpCp5UJNvDaed # LucHGdZ32hlds9SmoRrAfkOpdBpYWBH0DgpZUr8i9dUMyPU+U8IRLU/cmic1t2GS # STPj2sm4o6blvt78EfyWioCZc5dFzbbLFZVMxasSnimyWa/x5PtWhjxf+N0phM9U # Rex+YttUVyrMy4Hy8UZ9TJaxZE5LzCCruVBh9ZxiqHs3KagBNf7BZgrfNYbtpFyI # 8ZQDPOdd1/5oe0hadAs1rkcWZJeSJqTd9K6mtZhmIeG5iMTXqGugClwEemb7xL+Q # 2qGb1aNBf7YHGdi/4l6PLqWpOLx8sEtLTr1ZdXD+m1/khX4W1iXfga9Wh6DfVShS # ZVVl7VINQmSb10NdzyX+oENiIAhPYIKw9PK31cD0lW4fF0/refsKG9YA7/jtBG4I # OxSUUmhbDIHCXuN5ilpFUy1C3SK4kwYaOARolfVD/aPyxdRG9Nx4scMP2Kla3T3Z # kNYxByINGaEc0U5fV2eMG+T+TVQxyD33uPmhjOcCdKkm+WD/gE/dpUTSH9gfYqCw # ptTg1dkcCMlePZKWqjULXXkIbqoFloWQzxbq89kKbmqdJ7M6MIIHcTCCBVmgAwIB # AgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UE # BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc # BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0 # IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1 # WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCC # AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O # 1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZn # hUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t # 1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxq # D89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmP # frVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSW # rAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv # 231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zb # r17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYcten # IPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQc # xWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17a # j54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQAB # MCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQU # n6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEw # QTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9E # b2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/ # MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJ # oEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01p # Y1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYB # BQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9v # Q2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3h # LB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x # 5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74p # y27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1A # oL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbC # HcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB # 9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNt # yo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3 # rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcV # v7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A24 # 5oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lw # Y1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA1AwggI4AgEBMIH5oYHRpIHOMIHL # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN # aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT # UyBFU046MzMwMy0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAAtsSBlmfJgdcnUMZvl8aOmVem25 # oIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO # BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm # MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcN # AQELBQACBQDugrniMCIYDzIwMjYxMDIxMDQxMTE0WhgPMjAyNjEwMjIwNDExMTRa # MHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAO6CueICAQAwCgIBAAICEeICAf8wBwIB # AAICEmswCgIFAO6EC2ICAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoD # AqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQsFAAOCAQEAW56S # mU5NoV9N9scDb6vpeHPDyM+smaMcv0cvmyNmLClijHyPFp64xPK47TR8/Jvq7Jzv # rWLwfQQ55/rJO6T1bS024gLRKWHF6El41Ih7uwWcCyytmFTzLIW1kqRLASIKS/GU # mhkqjyLYMTbHhWwvik0R7tvYDYLwWoS0lGLsprpT83QoEnoeBRS1V/zF9uQ4EKcB # CTKy2p5+Gj8p1LTcZ1AAEv5LAsHS9HOyjtRTaEACYv8ZxKaTCIwoss75H4DmTmvp # udDp6QMGdnJVZoj9VpUne+eptFfJTb+b1g302BkiqN5s1VkhWy4mSz7mk6mCeObK # t/IFXzKhvJZEeGovJTGCBA0wggQJAgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w # IFBDQSAyMDEwAhMzAAACITPANfvSDyGkAAEAAAIhMA0GCWCGSAFlAwQCAQUAoIIB # SjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIGLr # RVMi1FlmBGUuokIpUKkItfTLjz2ht2xvAWQSMpkXMIH6BgsqhkiG9w0BCRACLzGB # 6jCB5zCB5DCBvQQgAO8hB58VVRrgEnLwhnLAwC+YZIp1RWoSbL0D748KPUQwgZgw # gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD # VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiEzwDX70g8h # pAABAAACITAiBCArzt+ttgKueXlKPcUVKsY/RkW6NaQO/p25886WNAHv6TANBgkq # hkiG9w0BAQsFAASCAgCkrTb9MgJqfzs7HKtTvYS/oa+Cs6ChXoIH3wMJGO/tW+T/ # XBh7zoKnfE/8d07jAdO6SFWGUvSfjzyEy2EAnyN64q0SoAEV1UO8somRKXKX2iv8 # YzM4XZhvnmQJIrqZCbzIvkbomsQdYTTckQN1v9SLQuQuwMIXztWIkiSzIoAmf7uj # SXcjg2yeheGHo1A6WNY1O18nyi9vE91W5ZMaCt2OGHI4tC9zWmbj/l/CDzuvuvsT # la4ks7G/kfDfy5h92qNxHxdvcxmhyOnooXikiOfD8FW9W3h2Mi1BTN6zDH3UluxN # tlQp9qfrU8LwSkG2h+f7Ccxb6ZfLMMHF7qWwEEu5uTPT1XV7PkFkaTEBFbez+DIh # ApdfJ5MPhOghUVv+YTQxVhd3lI9k1HAW7R1Gz9NEunkiatceOMbnUjYRtOnzdXzo # ubF7lT8N99ECL+Q1LCtcl0eo+poufMY1SUqpW4VN+FOdtnloM1eGmqqy0yIeM5jU # Zi3MTl1aIPG98ssWluEJ/+GQ3CdRj13AogU/0grM5SBCZNj4qZdBOEH1V3JGnb1B # 7/C+wOWsRIDGsrZ9WOpRjGPur+7HarC/t7a0jz+0gxWeAo/Ch92qZKiMOcy6KaEz # ziZuRHEKd7d8TiE7bPJSzZb3gAZlhutDlNYk4UrncysFpXsWsxGILe+gK5F1YA== # SIG # End signature block |