Private/Tests/Cleanup/Remove-AvmBicepResource.ps1
|
function Remove-AvmBicepResource { [CmdletBinding(SupportsShouldProcess)] param ( [Parameter(Mandatory = $true)] [string] $ResourceId, [Parameter(Mandatory = $true)] [string] $Type ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Type -ieq 'Microsoft.Authorization/roleAssignments') { $resource = ConvertTo-AvmBicepCleanupResource -ResourceIds @($ResourceId) $assignmentId = [guid]::Empty if ($resource.type -ine $Type -or -not [guid]::TryParseExact($ResourceId.Split('/')[-1], 'D', [ref]$assignmentId)) { throw [AvmConfigurationException]::new('Role-assignment cleanup requires an exact ARM role assignment ID ending in a GUID.') } } if (-not $PSCmdlet.ShouldProcess($ResourceId, 'Remove Bicep test resource')) { return } if ($PSCmdlet.ShouldProcess("Possible locks on resource with ID [$ResourceId]", 'Handle')) { Remove-AvmBicepResourceLock -ResourceId $ResourceId -Type $Type } switch ($Type) { 'Microsoft.Insights/diagnosticSettings' { $parentResourceId = $ResourceId.Substring( 0, $ResourceId.LastIndexOf('/providers/', [System.StringComparison]::OrdinalIgnoreCase)) $resourceName = $ResourceId.Split('/')[-1] if ($PSCmdlet.ShouldProcess("Diagnostic setting [$resourceName]", 'Remove')) { $null = Remove-AzDiagnosticSetting -ResourceId $parentResourceId -Name $resourceName } break } 'Microsoft.Authorization/locks' { if ($PSCmdlet.ShouldProcess("Lock with ID [$ResourceId]", 'Remove')) { Remove-AvmBicepResourceLock -ResourceId $ResourceId -Type $Type } break } 'Microsoft.KeyVault/vaults/keys' { $resourceName = $ResourceId.Split('/')[-1] Write-Verbose ('[/] Skipping resource [{0}] of type [{1}]. Reason: It is handled by different logic.' -f $resourceName, $Type) -Verbose break } 'Microsoft.KeyVault/vaults/accessPolicies' { $resourceName = $ResourceId.Split('/')[-1] Write-Verbose ('[/] Skipping resource [{0}] of type [{1}]. Reason: It is handled by different logic.' -f $resourceName, $Type) -Verbose break } 'Microsoft.KeyVault/managedHSMs/keys' { $parentName = $ResourceId.Split('/')[8] $resourceName = $ResourceId.Split('/')[-1] $hSMKeyUri = 'https://{0}.managedhsm.azure.net/keys/{1}' -f $parentName, $resourceName if ($PSCmdlet.ShouldProcess("Managed HSM key [$hSMKeyUri]", 'Remove')) { $hSMKeyApiUri = '{0}?api-version=2025-05-01' -f $hSMKeyUri $removeRequestInputObject = @{ Method = 'DELETE' Uri = $hSMKeyApiUri } $hSMKeyState = Invoke-AzRestMethod @removeRequestInputObject $hSMKeyStateContent = $hSMKeyState.Content | ConvertFrom-Json if ($hSMKeyState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $hSMKeyStateContent.error.code, $hSMKeyStateContent.error.message))) } } break } 'Microsoft.ServiceBus/namespaces/authorizationRules' { if ($ResourceId.Split('/')[-1] -eq 'RootManageSharedAccessKey') { Write-Verbose ('[/] Skipping resource [RootManageSharedAccessKey] of type [{0}]. Reason: The Service Bus''s default authorization key cannot be removed' -f $Type) -Verbose } else { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } } break } 'Microsoft.Compute/diskEncryptionSets' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $diskEncryptionSet = Get-AzDiskEncryptionSet -Name $resourceName -ResourceGroupName $resourceGroupName $keyVaultResourceId = $diskEncryptionSet.ActiveKey.SourceVault.Id $keyVaultName = $keyVaultResourceId.Split('/')[-1] $objectId = $diskEncryptionSet.Identity.PrincipalId if ($PSCmdlet.ShouldProcess(('Access policy [{0}] from key vault [{1}]' -f $objectId, $keyVaultName), 'Remove')) { $null = Remove-AzKeyVaultAccessPolicy -VaultName $keyVaultName -ObjectId $objectId } if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } break } 'Microsoft.RecoveryServices/vaults/backupstorageconfig' { break } 'Microsoft.Authorization/roleAssignments' { if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove role assignment')) { $response = Invoke-AzRestMethod -Method DELETE -Path "$($ResourceId)?api-version=2022-04-01" -ErrorAction Stop $status = Get-AvmPropertyValue -InputObject $response -Name StatusCode -NoEnumerate if (($status -isnot [int] -and $status -isnot [System.Net.HttpStatusCode]) -or $status -notin @(200, 204, 404)) { throw [AvmProcessException]::new('ARM did not confirm removal or absence of the recorded role assignment.') } } break } 'Microsoft.Authorization/roleEligibilityScheduleRequests' { $idElem = $ResourceId.Split('/') $scope = $idElem[0..($idElem.Count - 5)] -join '/' if ([string]::IsNullOrEmpty($scope)) { $scope = '/' } $pimRequestName = $idElem[-1] $pimRoleAssignment = Get-AzRoleEligibilityScheduleRequest -Scope $scope -Name $pimRequestName if ($pimRoleAssignment) { $pimRoleAssignmentPrinicpalId = $pimRoleAssignment.PrincipalId $pimRoleAssignmentRoleDefinitionId = $pimRoleAssignment.RoleDefinitionId $guid = New-Guid Write-Verbose 'Waiting for 5 minutes before removing PIM role assignment' -Verbose Start-Sleep -Seconds 300 $removalInputObject = @{ Name = $guid Scope = $scope PrincipalId = $pimRoleAssignmentPrinicpalId RequestType = 'AdminRemove' RoleDefinitionId = $pimRoleAssignmentRoleDefinitionId } if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove role eligibility')) { $null = New-AzRoleEligibilityScheduleRequest @removalInputObject } } break } 'Microsoft.Authorization/roleAssignmentScheduleRequests' { $idElem = $ResourceId.Split('/') $scope = $idElem[0..($idElem.Count - 5)] -join '/' if ([string]::IsNullOrEmpty($scope)) { $scope = '/' } $pimRequestName = $idElem[-1] $pimRoleAssignment = Get-AzRoleAssignmentScheduleRequest -Scope $scope -Name $pimRequestName if ($pimRoleAssignment) { $pimRoleAssignmentPrinicpalId = $pimRoleAssignment.PrincipalId $pimRoleAssignmentRoleDefinitionId = $pimRoleAssignment.RoleDefinitionId $guid = New-Guid Write-Verbose 'Waiting for 5 minutes before removing PIM role assignment' -Verbose Start-Sleep -Seconds 300 $removalInputObject = @{ Name = $guid Scope = $scope PrincipalId = $pimRoleAssignmentPrinicpalId RequestType = 'AdminRemove' RoleDefinitionId = $pimRoleAssignmentRoleDefinitionId } if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove scheduled role assignment')) { $null = New-AzRoleAssignmentScheduleRequest @removalInputObject } } break } 'Microsoft.Cdn/profiles' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $cdnProfile = Invoke-AvmBicepCleanupCli -ArgumentList @( 'cdn', 'profile', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if ($cdnProfile) { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'cdn', 'profile', 'delete', '--resource-group', $resourceGroupName, '--name', $resourceName ) } } else { Write-Warning "Unable to find CDN profile [$resourceName] in resource group [$resourceGroupName]" } break } 'Microsoft.RecoveryServices/vaults' { if ((Get-AzRecoveryServicesVaultProperty -VaultId $ResourceId).SoftDeleteFeatureState -ne 'Disabled') { if ($PSCmdlet.ShouldProcess(('Soft-delete on RSV [{0}]' -f $ResourceId), 'Set')) { $null = Set-AzRecoveryServicesVaultProperty -VaultId $ResourceId -SoftDeleteFeatureState 'Disable' } } $backupItems = Get-AzRecoveryServicesBackupItem -BackupManagementType 'AzureVM' -WorkloadType 'AzureVM' -VaultId $ResourceId foreach ($backupItem in $backupItems) { Write-Verbose ('Removing Backup item [{0}] from RSV [{1}]' -f $backupItem.Name, $ResourceId) -Verbose if ($backupItem.DeleteState -eq 'ToBeDeleted') { if ($PSCmdlet.ShouldProcess('Soft-deleted backup data removal', 'Undo')) { $null = Undo-AzRecoveryServicesBackupItemDeletion -Item $backupItem -VaultId $ResourceId -Force } } if ($PSCmdlet.ShouldProcess(('Backup item [{0}] from RSV [{1}]' -f $backupItem.Name, $ResourceId), 'Remove')) { $null = Disable-AzRecoveryServicesBackupProtection -Item $backupItem -VaultId $ResourceId -RemoveRecoveryPoints -Force } } if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } break } 'Microsoft.DataProtection/backupVaults' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $vault = Get-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName if ($vault.ImmutabilityState -ne 'Disabled') { Write-Verbose (' [-] Disabling immutability on vault [{0}]' -f $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Immutability on vault [{0}]' -f $resourceName), 'Update')) { $null = Update-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName -ImmutabilityState Disabled } } if ($vault.SoftDeleteState -ne 'Off') { Write-Verbose (' [-] Disabling soft-deletion on vault [{0}]' -f $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Soft-delete on vault [{0}]' -f $resourceName), 'Update')) { $null = Update-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName -SoftDeleteState Off } } $softDeletedBackupInstances = Get-AzDataProtectionSoftDeletedBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($softDeletedBackupInstance in $softDeletedBackupInstances) { Write-Verbose (' [-] Removing Backup instance soft deletion [{0}] from vault [{1}]' -f $softDeletedBackupInstance.Name, $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Soft deletion on backup instance [{0}] from vault [{1}]' -f $softDeletedBackupInstance.Name, $resourceName), 'Undo')) { $null = Undo-AzDataProtectionBackupInstanceDeletion -ResourceGroupName $resourceGroupName -VaultName $resourceName -BackupInstanceName $softDeletedBackupInstance.name } } $backupInstances = Get-AzDataProtectionBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($backupInstance in $backupInstances) { Write-Verbose (' [-] Removing Backup instance [{0}] from vault [{1}]' -f $backupInstance.Name, $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Backup instance [{0}] from vault [{1}]' -f $backupInstance.Name, $resourceName), 'Remove')) { $null = Remove-AzDataProtectionBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName -Name $backupInstance.name } } $backupPolicies = Get-AzDataProtectionBackupPolicy -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($backupPolicy in $backupPolicies) { Write-Verbose (' [-] Removing Backup policy [{0}] from vault [{1}]' -f $backupPolicy.Name, $resourceName) -Verbose if ($PSCmdlet.ShouldProcess(('Backup instance [{0}] from vault [{1}]' -f $backupPolicy.Name, $resourceName), 'Remove')) { $null = Remove-AzDataProtectionBackupPolicy -ResourceGroupName $resourceGroupName -VaultName $resourceName -Name $backupPolicy.name } } Write-Verbose (' [-] Removing Backup vault [{0}]' -f $resourceName) -Verbose if ($PSCmdlet.ShouldProcess("Backup vault with ID [$ResourceId]", 'Remove')) { $null = Remove-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName } break } 'Microsoft.OperationalInsights/workspaces' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] $workspaceApiPath = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.OperationalInsights/workspaces/{2}?api-version=2025-02-01' -f $subscriptionId, $resourceGroupName, $resourceName $getWorkspaceStateInputObject = @{ Method = 'GET' Path = $workspaceApiPath } $workspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $workspaceState.Content | ConvertFrom-Json if ($workspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } $replication = Get-AvmPropertyValue -InputObject $workspaceStateContent.properties -Name 'replication' if (Get-AvmPropertyValue -InputObject $replication -Name 'enabled') { $retryCount = 1 $retryLimit = 90 $retryInterval = 60 $replicationCreated = [DateTime]$workspaceStateContent.properties.replication.createdDate $replicationFullyProvisioned = $false do { if ([DateTime]::UtcNow -lt $replicationCreated.AddHours(1)) { $timeLeft = [int]($replicationCreated.AddHours(1) - [DateTime]::UtcNow).TotalSeconds Write-Verbose (' [progress] Waiting {0} minutes to ensure at least 1 hour has passed since replication creation time [{1}] (UTC).' -f [int]($timeLeft / 60), $replicationCreated) -Verbose Start-Sleep -Seconds ([int]$timeLeft + 10) $retryCount++ continue } $getWorkspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $getWorkspaceState.Content | ConvertFrom-Json if ($getWorkspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } if ($workspaceStateContent.properties.replication.provisioningState -eq 'Succeeded') { Write-Verbose (' [progress] Workspace replication is in a state that allows disabling.') -Verbose $replicationFullyProvisioned = $true break } else { $replicationFullyProvisioned = $false Write-Verbose (' [progress] Waiting {0} seconds for workspace replication to finish provisioning. [{1}/{2}]' -f $retryInterval, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval $retryCount++ } } while (-not $replicationFullyProvisioned -and $retryCount -lt $retryLimit) if (-not $replicationFullyProvisioned) { throw [AvmProcessException]::new("Workspace replication did not finish provisioning: $ResourceId") } $disableReplicationInputObject = @{ Method = 'PUT' Path = $workspaceApiPath Payload = @{ properties = @{ replication = @{ enabled = $false } } location = $workspaceStateContent.location } | ConvertTo-Json -Depth 10 } Write-Verbose ('[*] Disabling workspace replication for resource [{0}] of type [{1}]' -f $resourceName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Log Analytics Workspace [$resourceName]", 'Disable replication')) { $disableReplicationResponse = Invoke-AzRestMethod @disableReplicationInputObject if ($disableReplicationResponse.StatusCode -notlike '2*') { $responseContent = $disableReplicationResponse.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 1 $retryLimit = 240 $retryInterval = 15 do { $getWorkspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $getWorkspaceState.Content | ConvertFrom-Json if ($getWorkspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } if (-not $workspaceStateContent.properties.replication.enabled -and $workspaceStateContent.properties.replication.provisioningState -eq 'Succeeded') { Write-Verbose (' [progress] Workspace replication is disabled.') -Verbose break } else { Write-Verbose (' [progress] Waiting {0} seconds for workspace replication to be disabled. [{1}/{2}]' -f $retryInterval, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval $retryCount++ } } while (($workspaceStateContent.properties.replication.enabled -or $workspaceStateContent.properties.replication.provisioningState -ne 'Succeeded') -and $retryCount -lt $retryLimit) Start-Sleep -Seconds 30 if ($workspaceStateContent.properties.replication.enabled -or $workspaceStateContent.properties.replication.provisioningState -ne 'Succeeded') { throw [AvmProcessException]::new("Workspace replication could not be disabled: $ResourceId") } } } if ($PSCmdlet.ShouldProcess("Log Analytics Workspace [$resourceName]", 'Remove')) { Write-Verbose ('[*] Purging resource [{0}] of type [{1}]' -f $resourceName, $Type) -Verbose $null = Remove-AzOperationalInsightsWorkspace -ResourceGroupName $resourceGroupName -Name $resourceName -Force -ForceDelete } break } 'Microsoft.VirtualMachineImages/imageTemplates' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] if ($PSCmdlet.ShouldProcess("Image Template [$resourceName]", 'Remove')) { $removeRequestInputObject = @{ Method = 'DELETE' Path = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.VirtualMachineImages/imageTemplates/{2}?api-version=2022-07-01' -f $subscriptionId, $resourceGroupName, $resourceName } $removalResponse = Invoke-AzRestMethod @removeRequestInputObject if ($removalResponse.StatusCode -notlike '2*') { $responseContent = $removalResponse.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 0 $retryLimit = 240 $retryInterval = 15 do { $retryCount++ $getRequestInputObject = @{ Method = 'GET' Path = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.VirtualMachineImages/imageTemplates/{2}?api-version=2022-07-01' -f $subscriptionId, $resourceGroupName, $resourceName } $getResponse = Invoke-AzRestMethod @getRequestInputObject if ($getResponse.StatusCode -eq 400) { throw [AvmProcessException]::new([string](($getResponse.Content | ConvertFrom-Json).error.message)) } elseif ($getResponse.StatusCode -eq 404) { $templateExists = $false } elseif ($getResponse.StatusCode -eq '200') { $templateExists = $true Write-Verbose (' [progress] Waiting {0} seconds for Image Template to be removed. [{1}/{2}]' -f $retryInterval, $retryCount, $retryLimit) -Verbose if ($retryCount -lt $retryLimit) { Start-Sleep -Seconds $retryInterval } } else { throw [AvmProcessException]::new( "Image template lookup failed with HTTP $($getResponse.StatusCode): $ResourceId") } } while ($templateExists -and $retryCount -lt $retryLimit) if ($templateExists) { throw [AvmProcessException]::new("Image template deletion did not finish: $ResourceId") } } break } 'Microsoft.MachineLearningServices/workspaces' { $subscriptionId = $ResourceId.Split('/')[2] $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $purgePath = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.MachineLearningServices/workspaces/{2}?api-version=2023-06-01-preview&forceToPurge=true' -f $subscriptionId, $resourceGroupName, $resourceName $purgeRequestInputObject = @{ Method = 'DELETE' Path = $purgePath } Write-Verbose ('[*] Purging resource [{0}] of type [{1}]' -f $resourceName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Machine Learning Workspace [$resourceName]", 'Purge')) { $purgeResource = Invoke-AzRestMethod @purgeRequestInputObject if ($purgeResource.StatusCode -notlike '2*') { $responseContent = $purgeResource.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 0 $retryLimit = 240 $retryInterval = 15 do { $retryCount++ if ($retryCount -ge $retryLimit) { throw [AvmProcessException]::new("Machine Learning workspace purge did not finish: $ResourceId") } Write-Verbose (' [progress] Waiting {0} seconds for workspace to be purged.' -f $retryInterval) -Verbose Start-Sleep -Seconds $retryInterval $workspace = @(Invoke-AvmBicepCleanupLookup -Command 'Get-AzMLWorkspace' -Parameters @{ Name = $resourceName ResourceGroupName = $resourceGroupName SubscriptionId = $subscriptionId }) $workspaceExists = @($workspace | Where-Object { $null -ne $_ }).Count -gt 0 } while ($workspaceExists) } break } { $PSItem -eq 'Microsoft.Subscription/aliases' -and $ResourceId -like '*dep-sub-blzv-tests*' } { $subscriptionName = $ResourceId.Split('/')[4] $subscriptions = @(Get-AzSubscription | Where-Object { $_.Name -eq $subscriptionName }) if ($subscriptions.Count -ne 1) { throw [AvmProcessException]::new("Expected one subscription for alias '$subscriptionName'; found $($subscriptions.Count).") } $subscription = $subscriptions[0] $subscriptionId = $subscription.Id $subscriptionState = $subscription.State $null = Set-AzContext -SubscriptionId $subscriptionId -Scope Process -ErrorAction Stop if (Invoke-AvmBicepCleanupLookup -Command 'Get-AzResourceGroup' -Parameters @{ Name = 'NetworkWatcherRG' }) { if ($PSCmdlet.ShouldProcess('Resource Group [NetworkWatcherRG]', 'Remove')) { $null = Remove-AzResourceGroup -Name 'NetworkWatcherRG' -Force } } if (-not (Invoke-AvmBicepCleanupLookup -Command 'Get-AzManagementGroupSubscription' -Parameters @{ GroupName = 'bicep-lz-vending-automation-decom' SubscriptionId = $subscriptionId })) { Write-Verbose ('[*] Moving resource [{0}] of type [{1}] to management group: bicep-lz-vending-automation-decom' -f $subscriptionName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Subscription [$subscriptionName] to Management Group: bicep-lz-vending-automation-decom", 'Move')) { $null = New-AzManagementGroupSubscription -GroupName 'bicep-lz-vending-automation-decom' -SubscriptionId $subscriptionId } } if ($subscriptionState -eq 'Enabled') { Write-Verbose ('[*] Disabling resource [{0}] of type [{1}]' -f $subscriptionName, $Type) -Verbose if ($PSCmdlet.ShouldProcess("Subscription [$subscriptionName]", 'Remove')) { $null = Disable-AzSubscription -SubscriptionId $subscriptionId -Confirm:$false } } break } 'Microsoft.ApiManagement/service' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] $apimService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if ($apimService) { $apimLocation = ($apimService | ConvertFrom-Json).location $retryCount = 0 $retryLimit = 30 $retryInterval = 60 $deleteSucceeded = $false do { $retryCount++ Write-Verbose ('[*] Removing API Management service [{0}] from resource group [{1}] (attempt [{2}/{3}])' -f $resourceName, $resourceGroupName, $retryCount, $retryLimit) -Verbose if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Remove')) { $deleteOutput = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'delete', '--resource-group', $resourceGroupName, '--name', $resourceName, '--yes' ) -IgnoreExitCode if ($deleteOutput.ExitCode -eq 0) { $deleteSucceeded = $true Write-Verbose ('[progress] Successfully initiated deletion of API Management service [{0}]' -f $resourceName) -Verbose } else { $deleteOutputString = $deleteOutput.StdErr if ($deleteOutputString -match 'ServiceLocked|transitioning') { Write-Verbose (' [progress] API Management service [{0}] is transitioning. Waiting {1} seconds before retrying. [{2}/{3}]' -f $resourceName, $retryInterval, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval } else { throw [AvmProcessException]::new( "Failed to delete API Management service '$resourceName': $deleteOutputString") } } } else { break } } while (-not $deleteSucceeded -and $retryCount -lt $retryLimit) if (-not $deleteSucceeded) { if ($retryCount -ge $retryLimit) { throw [AvmProcessException]::new( "Failed to delete API Management service '$resourceName' after $retryCount attempts.") } break } $retryCount = 0 $retryLimit = 60 $retryInterval = 30 $serviceSoftDeleted = $false do { $retryCount++ $existingService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if (-not $existingService) { $serviceSoftDeleted = $true Write-Verbose ('[progress] API Management service [{0}] has been soft-deleted.' -f $resourceName) -Verbose } else { Write-Verbose (' [progress] Waiting {0} seconds for API Management service [{1}] to be soft-deleted. [{2}/{3}]' -f $retryInterval, $resourceName, $retryCount, $retryLimit) -Verbose Start-Sleep -Seconds $retryInterval } } while (-not $serviceSoftDeleted -and $retryCount -lt $retryLimit) if (-not $serviceSoftDeleted) { throw [AvmProcessException]::new( "API Management service '$resourceName' did not finish soft deletion.") } $softDeletedService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'show', '--service-name', $resourceName, '--location', $apimLocation ) -AllowNotFound if ($softDeletedService) { Write-Verbose ('[*] Purging soft-deleted API Management service [{0}] in location [{1}]' -f $resourceName, $apimLocation) -Verbose if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Purge')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'purge', '--service-name', $resourceName, '--location', $apimLocation ) } } else { Write-Verbose ('[/] No soft-deleted API Management service [{0}] found in location [{1}]. Skipping purge.' -f $resourceName, $apimLocation) -Verbose } } else { Write-Verbose ('[/] API Management service [{0}] not found in resource group [{1}]. Checking for soft-deleted instance.' -f $resourceName, $resourceGroupName) -Verbose $softDeletedServices = @(Get-AvmBicepCleanupRestCollection -Path ( "/subscriptions/$subscriptionId/providers/Microsoft.ApiManagement/deletedservices?api-version=2021-08-01" )) if ($softDeletedServices) { $matchingDeleted = $softDeletedServices | Where-Object { $_.properties.serviceId -ieq $ResourceId } if ($matchingDeleted) { $apimLocation = $matchingDeleted.location Write-Verbose ('[*] Purging soft-deleted API Management service [{0}] in location [{1}]' -f $resourceName, $apimLocation) -Verbose if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Purge')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'purge', '--service-name', $resourceName, '--location', $apimLocation ) } } else { Write-Warning "Unable to find API Management service [$resourceName] (active or soft-deleted)" } } } break } 'Microsoft.Network/expressRouteGateways' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] if ($PSCmdlet.ShouldProcess("Express Route Gateway [$resourceName]", 'Remove')) { $null = Remove-AzExpressRouteGateway -ResourceGroupName $resourceGroupName -Name $resourceName -Force -ErrorAction 'Stop' $retryCount = 0 $maxRetries = 60 do { $gateway = Invoke-AvmBicepCleanupLookup -Command 'Get-AzExpressRouteGateway' -Parameters @{ ResourceGroupName = $resourceGroupName Name = $resourceName } if ($gateway) { $retryCount++ Write-Verbose ("Express Route Gateway [$resourceName] still deleting. Waiting 30 seconds. [{0}/{1}]" -f $retryCount, $maxRetries) -Verbose Start-Sleep -Seconds 30 } } while ($gateway -and $retryCount -lt $maxRetries) if ($gateway) { throw [AvmProcessException]::new([string]("Express Route Gateway [$resourceName] did not finish deleting within the expected time.")) } } break } default { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } } } } # SIG # Begin signature block # MIInKwYJKoZIhvcNAQcCoIInHDCCJxgCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAfgq35IqlsbJau # g/GKHVaPwh57BGHp0io4Ho+x+5IJSqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnHMIIZwwIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ # KoZIhvcNAQkEMSIEINsyYf6AWbA+rBS0rxrN2ZnPZazib4P1xNO6qwU8tj+CMEIG # CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v # d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAqP8WVzhev6K+ir9m # YsW2E60HrqKR4r9Ve/OXNrS3VutrLfulrY5WXsfSklcq/PWQNwE1GUWW7+8vVDXN # zqc7PCM7nogmEzn8fCZl/3jxWFmYTtEsfE9Q5g51qLNsRbJNyKOspaQgaJGdgXGp # Hg6Ac9Py0CyqmmtWUqGnUUYoQJYmvTyt8UiETfQfNGTalYeqDmAmHFtc/OM3dH60 # 3ttpyBGqVInoXDK80b0lEjhFyZxyXdHqEQX0rsOT/sZozfbNvDzTyGYxnw/c8O/t # l5QJCnaL3Oi5E+yLOqDYdtzEoh90iZq+VR+kfTmV0ce4Lw2n0MY8W4Uv3bu1aVbP # 9ceL8aGCF5cwgheTBgorBgEEAYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3Aw # ghdsAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9 # MIIBOQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCAaxjw+N3hC3FbG # Ux1Ihr5Qum9FBQdRaj5uasJtP9ylHQIGaqqqffRFGBMyMDI2MTAyNTExMjgyNC41 # NjZaMASAAgH0oIHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScw # JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046RTAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMT # HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgIT # MwAAAikO1WQqtJfyGgABAAACKTANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJV # UzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UE # ChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGlt # ZS1TdGFtcCBQQ0EgMjAxMDAeFw0yNjAyMTkxOTQwMDdaFw0yNzA1MTcxOTQwMDda # MIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL # ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxk # IFRTUyBFU046RTAwMi0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1l # LVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCe # ItFq4z1oCYSmUZmpYDsbJWEu++1bbc/Mz7Pa3I0ZX5EON+WirB0FvnGlyFRUylzO # 5TJXZfU8QFPOU95P1Y1OZ8J+quA5G+AWSBOr/48scl0s9RBpqgTMq/lbyqBz4CMm # vVR2QevAgVp4a1hbmOm9G7YWey68N5F5rSDYV0wMlg4Iy8YRuFgRN2eBpVXt9IvF # aFmBnQLZfo22KZ3L8PWEHUhXU5dLOSZoTfqqQ/B+deW56ACMnnHjPxZu+szHhZML # UrMWTgs9J7Cn8DtelcKj9aM+0Zq7tkSDHCrwo6eCSfw3clktXRRrdmsccal8RCDi # NFFgZsypwF2aGAF6kg41+Ql+thXpnOMUH4mPCAJZWp0zDWowsK/Yo5jHL1pT/Agb # L3FoAy4cbhOI4Pb1eQFG+jT7skS2F/b+ZACUA1EDZ830K+Bu0yw+FpSGy8tpd1sz # k3cUYjIpzIG4z3oFNmiSJN8YdNd4SHsER5Dks5bxiKbpvmfrOA39jTb7EW2TT7yS # WgJISfvTezuLmQsTVSzNsvapVlHhE2zBqDw409nvOtitCFbnhhXNfatzb2+Gf2tX # 2s6YBa151CC/8+emJvvegXbWNudzYt8cFRom0PZ+fJRhhBfdSqCqr8QeOGJ8VYlm # xFXqx1SdDSkTCSgpsskGqZwh/6umA1g4L7zeGBNngQIDAQABo4IBSTCCAUUwHQYD # VR0OBBYEFCdNRaSL9AW8QvaQ21WjRAXKN4M7MB8GA1UdIwQYMBaAFJ+nFV0AXmJd # g/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0El # MjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6 # Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGlt # ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0l # AQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUA # A4ICAQA9wc72lf/czDhp09T3PGAMOQhxl/x04jpE7t39FeqQSn2Up6DVzhgwnzCq # Y3NIhLtUaWrd7NxvrhZDca+J4xzvrRQNPHeRQpnJVeHsyTu53gTBlUB1TRI6OnZt # /AVmR9oMJ/NBOqB+d+SOb8Px6zRgRwk62sFkOkB5lig/DMnYEeR/amW9Hdo8vXcK # maa/DbSOAHSdfZFt+iqMZfNlkEOn71/RAKTNv4Qpq/2FhcjMMmSkIhshBdBVB0Vj # mkwFfhVUf5TTuLJ9sDR4EyCvOZJ3B6g7Iw6WjQxycjwkfzsVMTpfusJ5SwdOHL8y # GPWZOePjwa8ISXWs6kiVK/6S0/JVb1LpxpyYKREQjnU/5OecKt2OXlHdwFWZrwAi # 98RPZa6EExcb/LGLf10tNHju1eTlohY0jzNZQ0BDgSuMZgMU+8EEjtMQMIDnlPGE # UON7LHXHH0KL0FA01PEWVZKrr/LUOuuDTNFzw543FPMp4gkCIFlKdRuciR1IXOk+ # Xse6rj9tJFYgVn+44BHou2XQe5RX30ef3AQWa0mxyGDqJzGsV3X5+bNQeMV88iWu # lJPq5sgnGG9O/H1/HH4HsO9ZKGX/WrJpQmFuQrTOR49XjveaC0xaFmGsNg+RhbtD # 5qTkn+ISDvw0IJ/E/VXNdz/yWgol6r507hT8sAMupnhkF2uw1DCCB3EwggVZoAMC # AQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29m # dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIy # NVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hp # bmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jw # b3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAw # ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9 # DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2 # Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N # 7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXc # ag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJ # j361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjk # lqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37Zy # L9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M # 269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLX # pyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLU # HMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode # 2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEA # ATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYE # FJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEB # MEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # RG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEE # AYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB # /zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEug # SaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9N # aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsG # AQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jv # b0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt # 4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsP # MeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++ # Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9 # QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2 # wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aR # AfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5z # bcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nx # t67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3 # Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+AN # uOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/Z # cGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCB # yzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMc # TWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBU # U1MgRVNOOkUwMDItMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1T # dGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4DAhoDFQC3v9iSO22xob7ZxN5dXCEq+9Iv # /6CBgzCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3 # DQEBCwUAAgUA7ofjzzAiGA8yMDI2MTAyNTAyMTEyN1oYDzIwMjYxMDI2MDIxMTI3 # WjB3MD0GCisGAQQBhFkKBAExLzAtMAoCBQDuh+PPAgEAMAoCAQACAjjGAgH/MAcC # AQACAhMlMAoCBQDuiTVPAgEAMDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkK # AwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBAKVq # BuV2+AFj82TtKsM6QPVsNOjxjb1lFnjCP7Ne1hKG0KDlEsTHa/Gams+8HTlJuL7U # AncJ7GuSvP5CcNeXnsuHC8eGPtCu6pWCI4bjh5SIhctm9nLzOQmuNtWyqxSHL4lu # zvW74VLNV7pPJr6pZBGReBPD08Ezx06BIag3jUcj8qoqUYELgHngU6S6hxV6vTAR # 6XaNoTR12MCQtlf9kqgSE+gVAaYva4UY6DmYmakXYleGxgyKhExcU7jw19NlbIK5 # oCZWq/z4BZzA4WQHNX8v41DKkw2Z8mHFnU5IIdkFxJ+iI7Kf7uL4L6F1joWu4BVZ # 5zCtovWH6R3AAyVPAzQxggQNMIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEG # A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj # cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt # cCBQQ0EgMjAxMAITMwAAAikO1WQqtJfyGgABAAACKTANBglghkgBZQMEAgEFAKCC # AUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCAg # kBIj5NwyGEhVW2Oeb5AGQJuJfo9/5SjhMGiZogGoiDCB+gYLKoZIhvcNAQkQAi8x # geowgecwgeQwgb0EILfKPfEitvD/lSvEumxqPkkeOEtgkmKFEVMuel9oOrqSMIGY # MIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV # BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQG # A1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIpDtVkKrSX # 8hoAAQAAAikwIgQgqtq934ozcLqPA2vWTWUe8d79KTVKOkUbE2izOb939hkwDQYJ # KoZIhvcNAQELBQAEggIAQT13eMGC+ouIkO7ASrfHYIr2Ur+oaqUjEFO7WG3/XR+E # vUI771gOyZ3Kbc+oYzZHgxsTZaOmFq3GgUz/E1pvT5D2yhP5n5xoho/FEedHWWyv # ovtZfz4asl6WP0mazlt32es44m8EUjdMpv+PQkQRi7nxtEXoK//J73+ZC5+0O+el # fI/7P5i1Yb8FkMobBIx5/KWN22+X4HAM2/v+g2zlFgXgm+ha0KNJGGY3muJAyA44 # fRzpsXurzoGBTpsTqGk7L/YxW1EX0q0OULVAaDiBM36g8YbMYD4bYIc3WLcXVj9w # XhdRMqGWwu96EZmK/rwDQcuzLSf4AeHYzAp0RFSXU721CuqmG0wmKn66Gmuk9GBZ # pP1qac9Z5V8BlpSM9NRq34Alg3baAoWR5tyLIit0POA4gJkNmZm9OJUSqBk7+PNE # gn/0XZXoCPu+BPQXMFfRJ9snc5QkbpWoNlCz1oLC/p8cCMzApEfyxwXogGiFQvLK # +q7uLT1CWbVoJc12plfNPH60nNrcETLgMLBv6k6A4QW1up1PsiMhOUkUKEomM1iH # yqTSilM4+1Z2Jw7hVlJf77YdFourowpNmSnQpZUcn5w8aGcVJZeW6xCfoLMs1ceX # xvZ+Mj24QxSpXuHdgQrRBfb3PPpswo8a+bMkUaRRsETNp+pRPn/7tFn7qvblC5s= # SIG # End signature block |