Avm.Authoring

0.38.0

Private/Tests/Read-AvmBicepScopedWhatIf.ps1

                                function Read-AvmBicepScopedWhatIf {

    [CmdletBinding()]

    [OutputType([pscustomobject])]

    param(

        [Parameter(Mandatory)]

        [AllowEmptyString()]

        [string] $Output,

        [Parameter(Mandatory)]

        [string] $File,

        [Parameter(Mandatory)]

        [ValidateSet('sub', 'mg', 'tenant')]

        [string] $Scope,

        [Parameter(Mandatory)]

        [string] $SubscriptionId,

        [Parameter(Mandatory)]

        [string] $RunId,

        [string] $ManagementGroupId,

        [switch] $RequireOwnedGroup

    )

    Set-StrictMode -Version 3.0

    $ErrorActionPreference = 'Stop'

    $changes = @(Read-AvmBicepWhatIfChange -Output $Output -File $File)

    if ($changes.Count -eq 0) {

        throw [AvmConfigurationException]::new(

            "Bicep e2e what-if for '$File' predicted no resources; deployment was refused.")

    }

    $ownedGroupName = ''

    if ($RequireOwnedGroup) {

        if ($Scope -ne 'sub') {

            throw [AvmConfigurationException]::new(

                'A run-owned group is supported only beneath a subscription deployment.')

        }

        $groupPattern = '^/subscriptions/{0}/resourceGroups/(?<name>[^/?#]+)$' -f [regex]::Escape($SubscriptionId)

        $groupChanges = @($changes | Where-Object { $_.ResourceId -imatch $groupPattern })

        if ($groupChanges.Count -ne 1) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' must create exactly one group in the selected subscription.")

        }

        $groupResource = Get-AvmBicepScopedResource -ResourceId $groupChanges[0].ResourceId `

            -Scope sub -SubscriptionId $SubscriptionId -RunId $RunId

        $ownedGroupName = $groupResource.Name

    }

    $plan = $Output | ConvertFrom-Json -AsHashtable -ErrorAction Stop

    $resources = [System.Collections.Generic.List[object]]::new()

    $deployments = [System.Collections.Generic.List[object]]::new()

    $seen = [System.Collections.Generic.HashSet[string]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    for ($index = 0; $index -lt $changes.Count; $index++) {

        $change = $changes[$index]

        if ($change.ChangeType -cne 'Create' -or -not $seen.Add($change.ResourceId)) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' contains a non-Create or duplicate change at '$($change.ResourceId)'; deployment was refused.")

        }

        $resource = Get-AvmBicepScopedResource -ResourceId $change.ResourceId `

            -Scope $Scope -SubscriptionId $SubscriptionId -ManagementGroupId $ManagementGroupId `

            -RunId $RunId -OwnedGroupName $ownedGroupName

        $after = $plan['changes'][$index]['after']

        if ($after -isnot [System.Collections.IDictionary]) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' did not expand '$($change.ResourceId)' into a full resource payload.")

        }

        if (-not [string]::Equals([string]$after['name'], $resource.Name,

                [System.StringComparison]::OrdinalIgnoreCase) -or

            -not [string]::Equals([string]$after['type'], $resource.Type,

                [System.StringComparison]::OrdinalIgnoreCase) -or

            ($after.Contains('id') -and

            -not [string]::Equals([string]$after['id'], $resource.Id,

                [System.StringComparison]::OrdinalIgnoreCase))) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' returned an inconsistent expanded resource at '$($resource.Id)'.")

        }

        if ($RequireOwnedGroup) {

            foreach ($field in @('scope', 'subscriptionId', 'managementGroupId', 'tenantId')) {

                if ($after.Contains($field)) {

                    throw [AvmConfigurationException]::new(

                        "Bicep e2e what-if for '$File' returned an unexpected $field on '$($resource.Id)'.")

                }

            }

            if ($after.Contains('resourceGroup') -and

                ($resource.Kind -eq 'Group' -or

                $after['resourceGroup'] -isnot [string] -or

                -not [string]::Equals($after['resourceGroup'], $ownedGroupName,

                    [System.StringComparison]::OrdinalIgnoreCase))) {

                throw [AvmConfigurationException]::new(

                    "Bicep e2e what-if for '$File' returned a foreign group target for '$($resource.Id)'.")

            }

        }

        $tags = $after['tags']

        $ownership = Get-AvmBicepRunOwnership -Tags $tags -RunId $RunId

        if ($RequireOwnedGroup -and $ownership.State -eq 'Ambiguous') {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' returned ambiguous ownership tags for '$($resource.Id)'.")

        }

        if ($resource.Kind -eq 'Group' -and $ownership.State -ne 'Owned') {

            throw [AvmConfigurationException]::new(

                "Bicep e2e group '$($resource.Id)' must include its exact $((Get-AvmBicepConfiguration)['e2e']['ownershipTag']) ownership tag.")

        }

        if ($RequireOwnedGroup -and $resource.Kind -ne 'Group' -and

            (($null -ne $tags -and $tags -isnot [System.Collections.IDictionary]) -or

            $ownership.State -eq 'Foreign')) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' returned unverified ownership tags for '$($resource.Id)'.")

        }

        if ($resource.Kind -eq 'Deployment') {

            if ($RequireOwnedGroup) {

                $properties = $after['properties']

                if ($properties -isnot [System.Collections.IDictionary] -or

                    $properties['mode'] -isnot [string] -or

                    $properties['mode'] -cne 'Incremental' -or

                    $properties['template'] -isnot [System.Collections.IDictionary]) {

                    throw [AvmConfigurationException]::new(

                        "Bicep e2e what-if for '$File' did not expand inline group deployment '$($resource.Id)'.")

                }

                $nestedSchema = $properties['template']['$schema']

                if ($nestedSchema -isnot [string] -or

                    $nestedSchema -cnotmatch '^https://schema\.management\.azure\.com/schemas/\d{4}-\d{2}-\d{2}/deploymentTemplate\.json#$') {

                    throw [AvmConfigurationException]::new(

                        "Bicep e2e what-if for '$File' returned a non-group nested template at '$($resource.Id)'.")

                }

                $previewTemplate = @{

                    resources = @(@{

                            type       = 'Microsoft.Resources/deployments'

                            properties = $properties

                        })

                }

                Assert-AvmBicepScopedTestIsolation -Template $previewTemplate `

                    -Scope group -SourcePath $File

            }

            $deployments.Add($resource)

        }

        else {

            $resources.Add($resource)

        }

    }

    if ($resources.Count -eq 0) {

        throw [AvmConfigurationException]::new(

            "Bicep e2e what-if for '$File' predicted no inspectable resources; deployment was refused.")

    }

    if ($RequireOwnedGroup -and

        (@($resources | Where-Object { $_.Kind -eq 'Group' }).Count -ne 1 -or

        @($resources | Where-Object { $_.Kind -eq 'Resource' }).Count -eq 0 -or

        $deployments.Count -eq 0)) {

        throw [AvmConfigurationException]::new(

            "Bicep e2e what-if for '$File' lacks an owned group, its inline deployment or an approved group resource.")

    }

    return [pscustomobject]@{

        Resources      = $resources.ToArray()

        Deployments    = $deployments.ToArray()

        Changes        = $changes

        OwnedGroupName = $ownedGroupName

    }

}

# SIG # Begin signature block

# MIInOQYJKoZIhvcNAQcCoIInKjCCJyYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA4bnO91pLL7Tnt

# rLRyhJRJTb0pA+z0fF1R5Dv7jAeBsqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN

# xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1

# OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP

# oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC

# /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf

# rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j

# qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT

# xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT

# DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw

# YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w

# cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z

# b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl

# MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC

# AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN

# rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK

# 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK

# Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY

# BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu

# uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE

# msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz

# 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6

# U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO

# 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD

# 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC

# EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT

# AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS

# b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX

# DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ

# Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq

# lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo

# 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv

# QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a

# 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1

# FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO

# GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7

# ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ

# uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS

# CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm

# VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3

# SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E

# BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX

# LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP

# oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw

# TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv

# TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC

# AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D

# 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY

# nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI

# vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6

# aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w

# PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7

# RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK

# /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK

# YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw

# YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT

# Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnGMIIZwgIBATBu

# MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x

# KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc

# +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEICWRQulxCeUU3m83bCgqXsrsfS+s

# v+hm7hwDOjgcP2ytMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv

# AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE

# ggEApx+K1wvOKm6GAahV3DhsPFPwGFKnFehHvb7E4ZzXc5yi8a6JjB2wqyL4qj1y

# QadxsgcU9eV8ZNc+bmqMivRkzYdiTQo87/NHHgQCbDeY1vCrKTWgSj/6p/3iPuS0

# LZs0NQu9aCM1s+tcIXvsyQPwTSy2Z/klwToc8v5loqi5UhvimYM2JSkYoRdVB6n+

# GcDd0VO2DIrzXJkskQfc6JISWsH0JwOadxI5oPdLg8DBWSIRhwBhuDxmL1FBeQD0

# 5WuFkZZwNSpuufPZGOJzYBxQVlvtprOEcKvYCmusqOPafvAlav1e1HMg8H7LDJ5L

# qwO5SBJC+FhAYiz51+7i+gRXPaGCF5YwgheSBgorBgEEAYI3AwMBMYIXgjCCF34G

# CSqGSIb3DQEHAqCCF28wghdrAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsqhkiG

# 9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC

# AQUABCDDnIEoSPzER6ezfS62mEwnH8PjzJY7OHEwjhWXeRWA5wIGateDd/c5GBIy

# MDI2MTEwMjIwMjMwNi44OFowBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMw

# EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN

# aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh

# IE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpBNDAwLTA1RTAt

# RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEe0w

# ggcgMIIFCKADAgECAhMzAAACKPClh9fzyB5AAAEAAAIoMA0GCSqGSIb3DQEBCwUA

# MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT

# HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5NDAwNloX

# DTI3MDUxNzE5NDAwNlowgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAl

# BgNVBAsTHm5TaGllbGQgVFNTIEVTTjpBNDAwLTA1RTAtRDk0NzElMCMGA1UEAxMc

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQAD

# ggIPADCCAgoCggIBAK6O9uT+ypwJJF5lol8K5/U3BFxzteSeETrCQuh+Q2PWbEQC

# DfmrLbFwWOCNqu1W8DT1bxAdynIypVJc5PE0cmyaTSo/YIMu9QC6VaDtpLmgE5Gk

# RfWjPefRHac+p4fQgcrXMnGPFodbbUBu5nRn7AzdZg3OQGVweZV7TdkbuuWTbyHv

# avk/kwTwUakWZhbkeXumwpuAsR+tgCK2m22xv6xmwFQj6EwqXi4slii0rJm/V7A4

# iKcF9FTxCiyK+Oh9oF7NR/011X6IataHfbVadKwrcD8mXoYu1tJZdwlZQuBvG6qe

# hs8r5iUHfXvhMxZOBfhhaMbujQ63P+mMc0IoFsHvzx3KeEt0ZjoHTwT37hIatGmy

# 3LiIkc7J0cIDkziLnJhHCx2636Ca/EilPzI1clyMkKDS87ya/+cVj1bK2/aqYK0I

# UWK8ZRapTbT+xR5GihBkaJA4lCfT3kKPeKwiy9E/wpTuE38QMjwdWxv80/MwUu9H

# OetGePRM6cOI5NRydjCaT5d+hLWjCyRwIILAedsLTQPnzPzfLsrlkkHvjmFyfgIT

# adHd7pEayvjbLmq23ox3P+zsxOcNLZSZUdZfVf8dl7dSVfyCP+3rcvnTEg+qREIE

# R0zUAM1RpJ+j05CIpv9uPV2JkIZN8QNQEEuinWaGTAgXzZ9qmVXZu6xn5TiRAgMB

# AAGjggFJMIIBRTAdBgNVHQ4EFgQUqsmljPjy3Oi69WQFW2EBIWlD3cMwHwYDVR0j

# BBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0

# cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGlt

# ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggr

# BgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9N

# aWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0T

# AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4Aw

# DQYJKoZIhvcNAQELBQADggIBAJDo18uatFqGBW2BaDfzcZpLTt8fKh3puFxQ423a

# 1637oFo24fSvsAGRUeF46nEF2tSs4RhURoiKL10rdy5ks2anWJQDH9VuY5liXvHP

# 602uMJaquDWNCarShEHyIThAmnA2EY/ruhjmG5ghTQPiWEOhqGp+Aomf/QGT71Qo

# M/DleVRiat4WYmWP1hDNw896nwzEFfGH9jkju9B5FpblKO2ItA4tGTeCC+toOzlJ

# /j0wlXr8HDFcLau9R8QVfpJQOiioogT02BUhGrRFm7s63SLQiz4e88/SEHorA7Ey

# DVJYo59O0Wlal2jwwm+AoIeQ+lcTOCms/6nIge47uBVGVJOxtgEUuHbIh3+K0zi5

# gvRH7ZJIEFOlJJG2Gsa4SYSUjkEIczHMyD+iodI/BkAgCQzYLjHGLRK3uoy4D6b5

# nMViR+gXjVChImf4eOqGpZhDSb9I738qclEklTAx3lOIyeNn4T8MmJSvLm52JbJC

# m9+PaFAUjR2OFqGgBcNrN4RyIsXa4SdO6v1R+NzA66f+gxj5Qt+2c6LaMosyut5X

# T3tqTPP8nGmcOBglT+2BTt9B+WDsiqIv37Tbvr6OhAejbWZV5jlgPwqH+RRpjomb

# 85Mzzwbt69PP+qdG6bGi9OMxK2+lsAc1GGZJN0g9NXfYLK7EMpL9XlrmLAD5/1WI

# Gj7CMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0B

# AQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV

# BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAG

# A1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAw

# HhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T

# dGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOTh

# pkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xP

# x2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ

# 3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOt

# gFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYt

# cI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXA

# hjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0S

# idb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSC

# D/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEB

# c8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh

# 8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8Fdsa

# N8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkr

# BgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q

# /y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBR

# BgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3Nv

# ZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsG

# AQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAP

# BgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjE

# MFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kv

# Y3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEF

# BQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9w

# a2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEB

# CwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnX

# wnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOw

# Bb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jf

# ZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ

# 5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+

# ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgs

# sU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6

# OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p

# /cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6

# TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784

# cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA1AwggI4

# AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv

# bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0

# aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYD

# VQQLEx5uU2hpZWxkIFRTUyBFU046QTQwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1p

# Y3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAHWtuYWT

# NLuoArU5q/TwBSeFs0hSoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT

# Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m

# dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB

# IDIwMTAwDQYJKoZIhvcNAQELBQACBQDukyJlMCIYDzIwMjYxMTAyMTQ1MzI1WhgP

# MjAyNjExMDMxNDUzMjVaMHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAO6TImUCAQAw

# CgIBAAICAq4CAf8wBwIBAAICElgwCgIFAO6Uc+UCAQAwNgYKKwYBBAGEWQoEAjEo

# MCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG

# 9w0BAQsFAAOCAQEAcdotWlKH7EiDWgD6s/BCfDhcaYcSLCH7/IvY3iZrJlowYhGG

# iUFn95/H/KxNutEGLpdyV7wpbakxkSS+rnON0z6WeJVYeICsgEzwmg77jjGjucA3

# qL9lXmGGLuJSsaL94GQr1bIn31meHYoI4BxxviC16AF1hm87GNPVmPTXLFi6CM16

# FI78geUrbSkxUwy7+aUwCbtLHlyeYE7FopA0J5qDZ+saZeU0Qsg7eVtXBtLB1rfZ

# ItmjywmvsH5JUnW+05bm5zhEO6MP4CJYcS/iOyxUnA0L1ptylaeLKo7eEjYyZkgi

# 4PGglPgs5uqJfu09TtH9KJ0VKYjRozAmU/wVMzGCBA0wggQJAgEBMIGTMHwxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACKPClh9fzyB5AAAEAAAIoMA0G

# CWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJ

# KoZIhvcNAQkEMSIEINMRmoDDjQFqzyjIgj09tnLwIMbc0Dk7g0Uj3pZnWuj2MIH6

# BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgVbGKRlFgY1/igRVkrV5Pjkf7cZDf

# +rFXvlXC4G36ItcwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MAITMwAAAijwpYfX88geQAABAAACKDAiBCCi6qus+iJGfRUxmmWQ/7MQOMSc3bpg

# r6A5ZMSmYgDhfTANBgkqhkiG9w0BAQsFAASCAgCFZlssSH0RvwCK4pztybwm+UJx

# hUeDex6xHLR8XT2RkUZIzTA8KTdO/zQvIR2J91ElRlVvkPTHvR/Jx5sN1nV1cz0h

# nWCyvp5X9knmwNTX9uACUPt8UyODDiwxpjRzeMvGmm0Zp+ZXXSqSqOiCBYQv3w7e

# bvZxv7W6q51ya8JoMIYWyEnSdkP2Z/Tr7mV8c60L/E+LgbUfeYL5Q1DeumVvi9IX

# Uiil+1S37fjeU867/kSWCIoAAJXP3e9n4dRi1eVsP9lwkcEnneFZJ/3XC6C/XMf3

# 0Gcl6lswHHCO492UzCdIOA+jMqg0bdEo7uEM4eOoBou66dGsDpcQZbsW4+1vwZce

# wZFS5pg8MMRNcUU7VaviASUXpIVruXeaMKQn8YIZ21CNjqOSsewGJp33rg+Scowf

# ++Pgi6gf3pzkupX4k/NqKTOPuJ4uNSfyn1d+S4x+ZKWAeIJB9HxggKcNwvfcXFJE

# ZmV9oFgWCrYpFSRvSZY1XqUpnvdiXoM2mrG+Ls7/SnC4AmKOeXcxTUjB8/azBAtO

# MNikJVcdDoPU+iyRjA9+0+RI8bc0HaS1XhSH2zmr+LoWgcYkMcKt88TYtT6QXfkq

# MUORc2ZjzUMTlPo0+HMS0FkiRRZ/zs0p7iyY4m5BGsKpyYTETWprj6vshZ21xpvZ

# /OE31Q6UvZo7MMUgvQ==

# SIG # End signature block