Private/Tests/Cleanup/Remove-AvmBicepResource.ps1
|
function Remove-AvmBicepResource { [CmdletBinding(SupportsShouldProcess)] param ( [Parameter(Mandatory = $true)] [string] $ResourceId, [Parameter(Mandatory = $true)] [string] $Type, [string] $SubscriptionCleanupManagementGroupId ) Set-StrictMode -Version 3.0 $ErrorActionPreference = 'Stop' if ($Type -ieq 'Microsoft.Authorization/roleAssignments') { $resource = ConvertTo-AvmBicepCleanupResource -ResourceIds @($ResourceId) $assignmentId = [guid]::Empty if ($resource.type -ine $Type -or -not [guid]::TryParseExact($ResourceId.Split('/')[-1], 'D', [ref]$assignmentId)) { throw [AvmConfigurationException]::new('Role-assignment cleanup requires an exact ARM role assignment ID ending in a GUID.') } } $managementGroupName = '' if ($Type -ieq 'Microsoft.Management/managementGroups') { $resource = ConvertTo-AvmBicepCleanupResource -ResourceIds @($ResourceId) if ($resource.type -ine $Type -or $ResourceId -notmatch '^/providers/Microsoft\.Management/managementGroups/[^/]+$') { throw [AvmConfigurationException]::new('Management-group cleanup requires an exact management group ID.') } $managementGroupName = $ResourceId.Split('/')[-1] } if (-not $PSCmdlet.ShouldProcess($ResourceId, 'Remove Bicep test resource')) { return } if ($Type -ine 'Microsoft.Management/managementGroups' -and $PSCmdlet.ShouldProcess("Possible locks on resource with ID [$ResourceId]", 'Handle')) { try { Remove-AvmBicepResourceLock -ResourceId $ResourceId -Type $Type } catch { if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or $_.FullyQualifiedErrorId.Split(',')[0] -eq 'AvmBicepContextRestoreFailed') { throw } $PSCmdlet.ThrowTerminatingError( [System.Management.Automation.ErrorRecord]::new( $_.Exception, 'AvmBicepLockValidationFailed', $_.CategoryInfo.Category, $_.TargetObject)) } } switch ($Type) { 'Microsoft.Management/managementGroups' { if ($PSCmdlet.ShouldProcess("Management group [$managementGroupName]", 'Remove')) { $null = Remove-AzManagementGroup -GroupName $managementGroupName -ErrorAction Stop } break } 'Microsoft.Insights/diagnosticSettings' { $parentResourceId = $ResourceId.Substring( 0, $ResourceId.LastIndexOf('/providers/', [System.StringComparison]::OrdinalIgnoreCase)) $resourceName = $ResourceId.Split('/')[-1] if ($PSCmdlet.ShouldProcess("Diagnostic setting [$resourceName]", 'Remove')) { $null = Remove-AzDiagnosticSetting -ResourceId $parentResourceId -Name $resourceName } break } 'Microsoft.Authorization/locks' { if ($PSCmdlet.ShouldProcess("Lock with ID [$ResourceId]", 'Remove')) { Remove-AvmBicepResourceLock -ResourceId $ResourceId -Type $Type } break } 'Microsoft.KeyVault/vaults/keys' { $resourceName = $ResourceId.Split('/')[-1] Write-AvmLog -Level Info -Message "Skipped ${resourceName}: handled separately." break } 'Microsoft.KeyVault/vaults/accessPolicies' { $resourceName = $ResourceId.Split('/')[-1] Write-AvmLog -Level Info -Message "Skipped ${resourceName}: handled separately." break } 'Microsoft.KeyVault/managedHSMs/keys' { $parentName = $ResourceId.Split('/')[8] $resourceName = $ResourceId.Split('/')[-1] $hSMKeyUri = 'https://{0}.managedhsm.azure.net/keys/{1}' -f $parentName, $resourceName if ($PSCmdlet.ShouldProcess("Managed HSM key [$hSMKeyUri]", 'Remove')) { $hSMKeyApiUri = '{0}?api-version=2025-05-01' -f $hSMKeyUri $removeRequestInputObject = @{ Method = 'DELETE' Uri = $hSMKeyApiUri } $hSMKeyState = Invoke-AzRestMethod @removeRequestInputObject $hSMKeyStateContent = $hSMKeyState.Content | ConvertFrom-Json if ($hSMKeyState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $hSMKeyStateContent.error.code, $hSMKeyStateContent.error.message))) } } break } 'Microsoft.ServiceBus/namespaces/authorizationRules' { if ($ResourceId.Split('/')[-1] -eq 'RootManageSharedAccessKey') { Write-AvmLog -Level Info -Message 'Skipped RootManageSharedAccessKey: the default authorization key cannot be removed.' } else { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } } break } 'Microsoft.Compute/diskEncryptionSets' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $diskEncryptionSet = Get-AzDiskEncryptionSet -Name $resourceName -ResourceGroupName $resourceGroupName $keyVaultResourceId = $diskEncryptionSet.ActiveKey.SourceVault.Id $keyVaultName = $keyVaultResourceId.Split('/')[-1] $objectId = $diskEncryptionSet.Identity.PrincipalId if ($PSCmdlet.ShouldProcess(('Access policy [{0}] from key vault [{1}]' -f $objectId, $keyVaultName), 'Remove')) { $null = Remove-AzKeyVaultAccessPolicy -VaultName $keyVaultName -ObjectId $objectId } if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } break } 'Microsoft.RecoveryServices/vaults/backupstorageconfig' { break } 'Microsoft.Authorization/roleAssignments' { if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove role assignment')) { $response = Invoke-AzRestMethod -Method DELETE -Path "$($ResourceId)?api-version=2022-04-01" -ErrorAction Stop $status = Get-AvmPropertyValue -InputObject $response -Name StatusCode -NoEnumerate if (($status -isnot [int] -and $status -isnot [System.Net.HttpStatusCode]) -or $status -notin @(200, 204, 404)) { throw [AvmProcessException]::new('ARM did not confirm removal or absence of the recorded role assignment.') } } break } 'Microsoft.Authorization/roleEligibilityScheduleRequests' { $idElem = $ResourceId.Split('/') $scope = $idElem[0..($idElem.Count - 5)] -join '/' if ([string]::IsNullOrEmpty($scope)) { $scope = '/' } $pimRequestName = $idElem[-1] $pimRoleAssignment = Get-AzRoleEligibilityScheduleRequest -Scope $scope -Name $pimRequestName if ($pimRoleAssignment) { $pimRoleAssignmentPrinicpalId = $pimRoleAssignment.PrincipalId $pimRoleAssignmentRoleDefinitionId = $pimRoleAssignment.RoleDefinitionId $guid = New-Guid Write-AvmLog -Level Info -Message 'Waiting 5 minutes before removing the PIM role assignment.' Start-Sleep -Seconds 300 $removalInputObject = @{ Name = $guid Scope = $scope PrincipalId = $pimRoleAssignmentPrinicpalId RequestType = 'AdminRemove' RoleDefinitionId = $pimRoleAssignmentRoleDefinitionId } if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove role eligibility')) { $null = New-AzRoleEligibilityScheduleRequest @removalInputObject } } break } 'Microsoft.Authorization/roleAssignmentScheduleRequests' { $idElem = $ResourceId.Split('/') $scope = $idElem[0..($idElem.Count - 5)] -join '/' if ([string]::IsNullOrEmpty($scope)) { $scope = '/' } $pimRequestName = $idElem[-1] $pimRoleAssignment = Get-AzRoleAssignmentScheduleRequest -Scope $scope -Name $pimRequestName if ($pimRoleAssignment) { $pimRoleAssignmentPrinicpalId = $pimRoleAssignment.PrincipalId $pimRoleAssignmentRoleDefinitionId = $pimRoleAssignment.RoleDefinitionId $guid = New-Guid Write-AvmLog -Level Info -Message 'Waiting 5 minutes before removing the PIM role assignment.' Start-Sleep -Seconds 300 $removalInputObject = @{ Name = $guid Scope = $scope PrincipalId = $pimRoleAssignmentPrinicpalId RequestType = 'AdminRemove' RoleDefinitionId = $pimRoleAssignmentRoleDefinitionId } if ($PSCmdlet.ShouldProcess($ResourceId, 'Remove scheduled role assignment')) { $null = New-AzRoleAssignmentScheduleRequest @removalInputObject } } break } 'Microsoft.Cdn/profiles' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $cdnProfile = Invoke-AvmBicepCleanupCli -ArgumentList @( 'cdn', 'profile', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if ($cdnProfile) { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'cdn', 'profile', 'delete', '--resource-group', $resourceGroupName, '--name', $resourceName ) } } else { Write-Warning "Unable to find CDN profile [$resourceName] in resource group [$resourceGroupName]" } break } 'Microsoft.RecoveryServices/vaults' { if ((Get-AzRecoveryServicesVaultProperty -VaultId $ResourceId).SoftDeleteFeatureState -ne 'Disabled') { if ($PSCmdlet.ShouldProcess(('Soft-delete on RSV [{0}]' -f $ResourceId), 'Set')) { $null = Set-AzRecoveryServicesVaultProperty -VaultId $ResourceId -SoftDeleteFeatureState 'Disable' } } $backupItems = Get-AzRecoveryServicesBackupItem -BackupManagementType 'AzureVM' -WorkloadType 'AzureVM' -VaultId $ResourceId foreach ($backupItem in $backupItems) { Write-AvmLog -Level Info -Message "Removing backup item $($backupItem.Name) from $ResourceId." if ($backupItem.DeleteState -eq 'ToBeDeleted') { if ($PSCmdlet.ShouldProcess('Soft-deleted backup data removal', 'Undo')) { $null = Undo-AzRecoveryServicesBackupItemDeletion -Item $backupItem -VaultId $ResourceId -Force } } if ($PSCmdlet.ShouldProcess(('Backup item [{0}] from RSV [{1}]' -f $backupItem.Name, $ResourceId), 'Remove')) { $null = Disable-AzRecoveryServicesBackupProtection -Item $backupItem -VaultId $ResourceId -RemoveRecoveryPoints -Force } } if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } break } 'Microsoft.DataProtection/backupVaults' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $vault = Get-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName if ($vault.ImmutabilityState -ne 'Disabled') { Write-AvmLog -Level Info -Message "Disabling immutability on vault $resourceName." if ($PSCmdlet.ShouldProcess(('Immutability on vault [{0}]' -f $resourceName), 'Update')) { $null = Update-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName -ImmutabilityState Disabled } } if ($vault.SoftDeleteState -ne 'Off') { Write-AvmLog -Level Info -Message "Disabling soft deletion on vault $resourceName." if ($PSCmdlet.ShouldProcess(('Soft-delete on vault [{0}]' -f $resourceName), 'Update')) { $null = Update-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName -SoftDeleteState Off } } $softDeletedBackupInstances = Get-AzDataProtectionSoftDeletedBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($softDeletedBackupInstance in $softDeletedBackupInstances) { Write-AvmLog -Level Info -Message "Undoing soft deletion of backup instance $($softDeletedBackupInstance.Name) on vault $resourceName." if ($PSCmdlet.ShouldProcess(('Soft deletion on backup instance [{0}] from vault [{1}]' -f $softDeletedBackupInstance.Name, $resourceName), 'Undo')) { $null = Undo-AzDataProtectionBackupInstanceDeletion -ResourceGroupName $resourceGroupName -VaultName $resourceName -BackupInstanceName $softDeletedBackupInstance.name } } $backupInstances = Get-AzDataProtectionBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($backupInstance in $backupInstances) { Write-AvmLog -Level Info -Message "Removing backup instance $($backupInstance.Name) from vault $resourceName." if ($PSCmdlet.ShouldProcess(('Backup instance [{0}] from vault [{1}]' -f $backupInstance.Name, $resourceName), 'Remove')) { $null = Remove-AzDataProtectionBackupInstance -ResourceGroupName $resourceGroupName -VaultName $resourceName -Name $backupInstance.name } } $backupPolicies = Get-AzDataProtectionBackupPolicy -ResourceGroupName $resourceGroupName -VaultName $resourceName foreach ($backupPolicy in $backupPolicies) { Write-AvmLog -Level Info -Message "Removing backup policy $($backupPolicy.Name) from vault $resourceName." if ($PSCmdlet.ShouldProcess(('Backup instance [{0}] from vault [{1}]' -f $backupPolicy.Name, $resourceName), 'Remove')) { $null = Remove-AzDataProtectionBackupPolicy -ResourceGroupName $resourceGroupName -VaultName $resourceName -Name $backupPolicy.name } } Write-AvmLog -Level Info -Message "Removing backup vault $resourceName." if ($PSCmdlet.ShouldProcess("Backup vault with ID [$ResourceId]", 'Remove')) { $null = Remove-AzDataProtectionBackupVault -ResourceGroupName $resourceGroupName -VaultName $resourceName } break } 'Microsoft.OperationalInsights/workspaces' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] $workspaceApiPath = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.OperationalInsights/workspaces/{2}?api-version=2025-02-01' -f $subscriptionId, $resourceGroupName, $resourceName $getWorkspaceStateInputObject = @{ Method = 'GET' Path = $workspaceApiPath } $workspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $workspaceState.Content | ConvertFrom-Json if ($workspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } $replication = Get-AvmPropertyValue -InputObject $workspaceStateContent.properties -Name 'replication' if (Get-AvmPropertyValue -InputObject $replication -Name 'enabled') { $retryCount = 1 $retryLimit = 90 $retryInterval = 60 $replicationCreated = [DateTime]$workspaceStateContent.properties.replication.createdDate $replicationFullyProvisioned = $false do { if ([DateTime]::UtcNow -lt $replicationCreated.AddHours(1)) { $timeLeft = [int]($replicationCreated.AddHours(1) - [DateTime]::UtcNow).TotalSeconds Write-AvmLog -Level Info -Message "Waiting $([int]($timeLeft / 60)) minutes for workspace replication to reach one hour." Start-Sleep -Seconds ([int]$timeLeft + 10) $retryCount++ continue } $getWorkspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $getWorkspaceState.Content | ConvertFrom-Json if ($getWorkspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } if ($workspaceStateContent.properties.replication.provisioningState -eq 'Succeeded') { Write-AvmLog -Level Info -Message 'Workspace replication is ready to disable.' $replicationFullyProvisioned = $true break } else { $replicationFullyProvisioned = $false Write-AvmLog -Level Info -Message "Waiting $retryInterval seconds for workspace replication to finish provisioning ($retryCount/$retryLimit)." Start-Sleep -Seconds $retryInterval $retryCount++ } } while (-not $replicationFullyProvisioned -and $retryCount -lt $retryLimit) if (-not $replicationFullyProvisioned) { throw [AvmProcessException]::new("Workspace replication did not finish provisioning: $ResourceId") } $disableReplicationInputObject = @{ Method = 'PUT' Path = $workspaceApiPath Payload = @{ properties = @{ replication = @{ enabled = $false } } location = $workspaceStateContent.location } | ConvertTo-Json -Depth 10 } Write-AvmLog -Level Info -Message "Disabling workspace replication for $resourceName." if ($PSCmdlet.ShouldProcess("Log Analytics Workspace [$resourceName]", 'Disable replication')) { $disableReplicationResponse = Invoke-AzRestMethod @disableReplicationInputObject if ($disableReplicationResponse.StatusCode -notlike '2*') { $responseContent = $disableReplicationResponse.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 1 $retryLimit = 240 $retryInterval = 15 do { $getWorkspaceState = Invoke-AzRestMethod @getWorkspaceStateInputObject $workspaceStateContent = $getWorkspaceState.Content | ConvertFrom-Json if ($getWorkspaceState.StatusCode -notlike '2*') { throw [AvmProcessException]::new([string](('{0} : {1}' -f $workspaceStateContent.error.code, $workspaceStateContent.error.message))) } if (-not $workspaceStateContent.properties.replication.enabled -and $workspaceStateContent.properties.replication.provisioningState -eq 'Succeeded') { Write-AvmLog -Level Info -Message 'Workspace replication is disabled.' break } else { Write-AvmLog -Level Info -Message "Waiting $retryInterval seconds for workspace replication to be disabled ($retryCount/$retryLimit)." Start-Sleep -Seconds $retryInterval $retryCount++ } } while (($workspaceStateContent.properties.replication.enabled -or $workspaceStateContent.properties.replication.provisioningState -ne 'Succeeded') -and $retryCount -lt $retryLimit) Start-Sleep -Seconds 30 if ($workspaceStateContent.properties.replication.enabled -or $workspaceStateContent.properties.replication.provisioningState -ne 'Succeeded') { throw [AvmProcessException]::new("Workspace replication could not be disabled: $ResourceId") } } } if ($PSCmdlet.ShouldProcess("Log Analytics Workspace [$resourceName]", 'Remove')) { Write-AvmLog -Level Info -Message "Purging workspace $resourceName..." $null = Remove-AzOperationalInsightsWorkspace -ResourceGroupName $resourceGroupName -Name $resourceName -Force -ForceDelete } break } 'Microsoft.VirtualMachineImages/imageTemplates' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] if ($PSCmdlet.ShouldProcess("Image Template [$resourceName]", 'Remove')) { $removeRequestInputObject = @{ Method = 'DELETE' Path = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.VirtualMachineImages/imageTemplates/{2}?api-version=2022-07-01' -f $subscriptionId, $resourceGroupName, $resourceName } $removalResponse = Invoke-AzRestMethod @removeRequestInputObject if ($removalResponse.StatusCode -notlike '2*') { $responseContent = $removalResponse.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } $retryCount = 0 $retryLimit = 240 $retryInterval = 15 do { $retryCount++ $getRequestInputObject = @{ Method = 'GET' Path = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.VirtualMachineImages/imageTemplates/{2}?api-version=2022-07-01' -f $subscriptionId, $resourceGroupName, $resourceName } $getResponse = Invoke-AzRestMethod @getRequestInputObject if ($getResponse.StatusCode -eq 400) { throw [AvmProcessException]::new([string](($getResponse.Content | ConvertFrom-Json).error.message)) } elseif ($getResponse.StatusCode -eq 404) { $templateExists = $false } elseif ($getResponse.StatusCode -eq '200') { $templateExists = $true Write-AvmLog -Level Info -Message "Waiting $retryInterval seconds for the image template to be removed ($retryCount/$retryLimit)." if ($retryCount -lt $retryLimit) { Start-Sleep -Seconds $retryInterval } } else { throw [AvmProcessException]::new( "Image template lookup failed with HTTP $($getResponse.StatusCode): $ResourceId") } } while ($templateExists -and $retryCount -lt $retryLimit) if ($templateExists) { throw [AvmProcessException]::new("Image template deletion did not finish: $ResourceId") } } break } 'Microsoft.MachineLearningServices/workspaces' { $subscriptionId = $ResourceId.Split('/')[2] $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $purgePath = '/subscriptions/{0}/resourceGroups/{1}/providers/Microsoft.MachineLearningServices/workspaces/{2}?api-version=2023-06-01-preview&forceToPurge=true' -f $subscriptionId, $resourceGroupName, $resourceName $purgeRequestInputObject = @{ Method = 'DELETE' Path = $purgePath } Write-AvmLog -Level Info -Message "Purging Machine Learning workspace $resourceName..." if ($PSCmdlet.ShouldProcess("Machine Learning Workspace [$resourceName]", 'Purge')) { $purgeResource = Invoke-AzRestMethod @purgeRequestInputObject if ($purgeResource.StatusCode -notlike '2*') { $responseContent = $purgeResource.Content | ConvertFrom-Json throw [AvmProcessException]::new([string](('{0} : {1}' -f $responseContent.error.code, $responseContent.error.message))) } Write-AvmLog -Level Info -Message "Requested purge of Machine Learning workspace $resourceName (HTTP $($purgeResource.StatusCode))." $retryCount = 0 $retryLimit = 240 $retryInterval = 15 do { $retryCount++ if ($retryCount -ge $retryLimit) { throw [AvmProcessException]::new("Machine Learning workspace purge did not finish: $ResourceId") } Write-AvmLog -Level Info -Message "Waiting $retryInterval seconds for workspace $resourceName to be purged." Start-Sleep -Seconds $retryInterval $workspace = @(Invoke-AvmBicepCleanupLookup -Command 'Get-AzMLWorkspace' -Parameters @{ Name = $resourceName ResourceGroupName = $resourceGroupName SubscriptionId = $subscriptionId }) $workspaceExists = @($workspace | Where-Object { $null -ne $_ }).Count -gt 0 } while ($workspaceExists) Write-AvmLog -Level Info -Message "Confirmed workspace $resourceName is absent after purge." } break } { $PSItem -eq 'Microsoft.Subscription/aliases' -and ( $ResourceId -like '*dep-sub-blzv-tests*' -or -not [string]::IsNullOrWhiteSpace($SubscriptionCleanupManagementGroupId) ) } { $targetManagementGroupId = if ([string]::IsNullOrWhiteSpace($SubscriptionCleanupManagementGroupId)) { 'bicep-lz-vending-automation-decom' } else { $SubscriptionCleanupManagementGroupId } if ($targetManagementGroupId -cnotmatch '^[A-Za-z0-9_().-]{1,90}$' -or $targetManagementGroupId -in @('.', '..') -or $targetManagementGroupId.EndsWith('.')) { throw [AvmConfigurationException]::new('Subscription cleanup requires a valid target management group before mutation.') } $subscriptionName = $ResourceId.Split('/')[4] $subscriptions = @(Get-AzSubscription | Where-Object { $_.Name -eq $subscriptionName }) if ($subscriptions.Count -ne 1) { throw [AvmProcessException]::new("Expected one subscription for alias '$subscriptionName'; found $($subscriptions.Count).") } $subscription = $subscriptions[0] $subscriptionId = $subscription.Id $subscriptionState = $subscription.State $null = Set-AzContext -SubscriptionId $subscriptionId -Scope Process -ErrorAction Stop if (-not (Invoke-AvmBicepCleanupLookup -Command 'Get-AzManagementGroupSubscription' -Parameters @{ GroupName = $targetManagementGroupId SubscriptionId = $subscriptionId })) { Write-AvmLog -Level Info -Message "Moving subscription $subscriptionName to management group $targetManagementGroupId." if ($PSCmdlet.ShouldProcess("Subscription [$subscriptionName] to Management Group: $targetManagementGroupId", 'Move')) { $null = New-AzManagementGroupSubscription -GroupName $targetManagementGroupId -SubscriptionId $subscriptionId } } if (Invoke-AvmBicepCleanupLookup -Command 'Get-AzResourceGroup' -Parameters @{ Name = 'NetworkWatcherRG' }) { if ($PSCmdlet.ShouldProcess('Resource Group [NetworkWatcherRG]', 'Remove')) { $null = Remove-AzResourceGroup -Name 'NetworkWatcherRG' -Force } } if ($subscriptionState -eq 'Enabled') { Write-AvmLog -Level Info -Message "Disabling subscription $subscriptionName." if ($PSCmdlet.ShouldProcess("Subscription [$subscriptionName]", 'Remove')) { $null = Disable-AzSubscription -SubscriptionId $subscriptionId -Confirm:$false } } break } 'Microsoft.ApiManagement/service' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] $subscriptionId = $ResourceId.Split('/')[2] $apimService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if ($apimService) { $apimLocation = ($apimService | ConvertFrom-Json).location $retryCount = 0 $retryLimit = 30 $retryInterval = 60 $deleteSucceeded = $false do { $retryCount++ Write-AvmLog -Level Info -Message "Removing API Management service $resourceName from $resourceGroupName (attempt $retryCount/$retryLimit)." if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Remove')) { $deleteOutput = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'delete', '--resource-group', $resourceGroupName, '--name', $resourceName, '--yes' ) -IgnoreExitCode if ($deleteOutput.ExitCode -eq 0) { $deleteSucceeded = $true Write-AvmLog -Level Info -Message "Requested deletion of API Management service $resourceName." } else { $deleteOutputString = $deleteOutput.StdErr if ($deleteOutputString -match 'ServiceLocked|transitioning') { Write-AvmLog -Level Info -Message "Waiting $retryInterval seconds for API Management service $resourceName to finish transitioning ($retryCount/$retryLimit)." Start-Sleep -Seconds $retryInterval } else { throw [AvmProcessException]::new( "Failed to delete API Management service '$resourceName': $deleteOutputString") } } } else { break } } while (-not $deleteSucceeded -and $retryCount -lt $retryLimit) if (-not $deleteSucceeded) { if ($retryCount -ge $retryLimit) { throw [AvmProcessException]::new( "Failed to delete API Management service '$resourceName' after $retryCount attempts.") } break } $retryCount = 0 $retryLimit = 60 $retryInterval = 30 $serviceSoftDeleted = $false do { $retryCount++ $existingService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'show', '--resource-group', $resourceGroupName, '--name', $resourceName ) -AllowNotFound if (-not $existingService) { $serviceSoftDeleted = $true Write-AvmLog -Level Info -Message "Confirmed API Management service $resourceName is soft-deleted." } else { Write-AvmLog -Level Info -Message "Waiting $retryInterval seconds for API Management service $resourceName to be soft-deleted ($retryCount/$retryLimit)." Start-Sleep -Seconds $retryInterval } } while (-not $serviceSoftDeleted -and $retryCount -lt $retryLimit) if (-not $serviceSoftDeleted) { throw [AvmProcessException]::new( "API Management service '$resourceName' did not finish soft deletion.") } $softDeletedService = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'show', '--service-name', $resourceName, '--location', $apimLocation ) -AllowNotFound if ($softDeletedService) { Write-AvmLog -Level Info -Message "Purging API Management service $resourceName in $apimLocation..." if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Purge')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'purge', '--service-name', $resourceName, '--location', $apimLocation ) Write-AvmLog -Level Info -Message "Requested purge of API Management service $resourceName." } } else { Write-AvmLog -Level Info -Message "Skipped purge of API Management service ${resourceName}: no soft-deleted service found in $apimLocation." } } else { Write-AvmLog -Level Info -Message "Checking for a soft-deleted API Management service ${resourceName}: not found in $resourceGroupName." $softDeletedServices = @(Get-AvmBicepCleanupRestCollection -Path ( "/subscriptions/$subscriptionId/providers/Microsoft.ApiManagement/deletedservices?api-version=2021-08-01" )) if ($softDeletedServices) { $matchingDeleted = $softDeletedServices | Where-Object { $_.properties.serviceId -ieq $ResourceId } if ($matchingDeleted) { $apimLocation = $matchingDeleted.location Write-AvmLog -Level Info -Message "Purging API Management service $resourceName in $apimLocation..." if ($PSCmdlet.ShouldProcess("API Management service [$resourceName]", 'Purge')) { $null = Invoke-AvmBicepCleanupCli -ArgumentList @( 'apim', 'deletedservice', 'purge', '--service-name', $resourceName, '--location', $apimLocation ) Write-AvmLog -Level Info -Message "Requested purge of API Management service $resourceName." } } else { Write-Warning "Unable to find API Management service [$resourceName] (active or soft-deleted)" } } } break } 'Microsoft.Network/expressRouteGateways' { $resourceGroupName = $ResourceId.Split('/')[4] $resourceName = $ResourceId.Split('/')[-1] if ($PSCmdlet.ShouldProcess("Express Route Gateway [$resourceName]", 'Remove')) { $null = Remove-AzExpressRouteGateway -ResourceGroupName $resourceGroupName -Name $resourceName -Force -ErrorAction 'Stop' $retryCount = 0 $maxRetries = 60 do { $gateway = Invoke-AvmBicepCleanupLookup -Command 'Get-AzExpressRouteGateway' -Parameters @{ ResourceGroupName = $resourceGroupName Name = $resourceName } if ($gateway) { $retryCount++ Write-AvmLog -Level Info -Message "Waiting 30 seconds for ExpressRoute gateway $resourceName to be deleted ($retryCount/$maxRetries)." Start-Sleep -Seconds 30 } } while ($gateway -and $retryCount -lt $maxRetries) if ($gateway) { throw [AvmProcessException]::new([string]("Express Route Gateway [$resourceName] did not finish deleting within the expected time.")) } } break } default { if ($PSCmdlet.ShouldProcess("Resource with ID [$ResourceId]", 'Remove')) { $null = Remove-AzResource -ResourceId $ResourceId -Force -ErrorAction 'Stop' } } } } # SIG # Begin signature block # MIInUwYJKoZIhvcNAQcCoIInRDCCJ0ACAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDyTBSAllVstV3e # Hqc3vLAHzTmLx4xWolcV5msdonJztKCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghngMIIZ3AIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIGSZnXkOC/YBHeMIDauAR4U8z7xv # kE77OpvSXXdXxaS7MEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEAbnUgDccXwu/4iOQ9sDapAbVVoBPWCnrYsJtdQRzoNvKVfRhMU3NHXG9aj2H9 # VZBgzowHi4LIO4A5aAjlKFVdDjzdl5aTdWQxXwAnqz/pgWU2Frnp07lJRL47FLTA # revZAPdXTjS6+euzjBSnapP3YqH9vMu7LE1kyfelUnFFWUZ4AsCWw+dx3oexUzaB # LEBUAwHZ0bxrh/UrBn3SINHSIIYqdfUX/2pWc7MAOk28xREJ+QXHpwUrQqYjzMoi # yCnctG6i7gycZkzOKf4Gg3RPAMN1FKuwCbfd+2oW1VQktKSJTfdv/R5YZWo3LPfO # wSyu6lsGQ7qvVGQ/jWi+gX6hkaGCF7AwghesBgorBgEEAYI3AwMBMYIXnDCCF5gG # CSqGSIb3DQEHAqCCF4kwgheFAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG # 9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCAbLdMkJQPt6KqiGBD6Eq918kY0vwe0jBef5gAkUwr1/AIGavNrgNElGBMy # MDI2MTExMzE1NDQxNC4xMDVaMASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2 # RjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaCCEf4wggcoMIIFEKADAgECAhMzAAACMxBftzbaqEBSAAEAAAIzMA0GCSqG # SIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAw # DgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # JjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MTAx # NTE4Mzc0MFoXDTI4MDExMTE4Mzc0MFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh # dGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjZGMUEtMDVF # MC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC # IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvJeYUpkXCzUl9TgLYm5Z20zo # 1Yt1XXD87sEzAs5mcGBr6rM3uo4i5fMAfljkijJfwY3ypfnBuPX8IYS/SKq5k3q0 # Z2BzrVzMLMLTA81OPNgU/HspMj9wd/AxEuz7A0wH5vivLQWOribIaX5Efp4OFt3v # S1FS2bDNL8ojhv1v+yVKRX0WAmcN1j1lGKl/7qgPd2fJnQJAbMVS6NjAW16l7gLJ # YrFET/D9glQNAt0ZoNvtNhWQH3TxoOvtHl3VVFZpbpdbotXMdLb031/DTXBVcVwc # KE+z29ZzKul/ZQf1xyBQFbvqEbsjeBplOoYwlIfnZsnExCvpza3mGK9F49UIjR4F # g98DkOAy145xkiTG/lO1AWcBo5k6IgniKePSeus4TROMEFDh9/TrK7Shx4PFvLQY # TsN088WtIBd1nM/Ab0XWPlBpoKJN2tVCJs/t7L7t7r0WnHdhiqNcM7CdUAgWwrcI # yRHhNfHFoR8tZmXG+D1XDcVD832wLqTxfhEZDZf6MOWyFM/p75pVdpUjMK6L7BRt # Lqmq7+3sltGgVTuCy23OTvKMzZ0MgzzSIQ57/XIZyyUl6VpaEBR8vjxIjVfPCgSW # UISK9jNatLFHQeZJmQ0YZbEmhBNFGbcHI+lSXrTXiVJQ65U9VdpK5Q+iD4GWvzTo # NN3bsjiqRGZ1cn0z0gUCAwEAAaOCAUkwggFFMB0GA1UdDgQWBBQ03ANXWvlTdHvR # /foC/vNWzgmesjAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV # HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny # bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI # KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy # MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMI # MA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAgEAVBdJbvLNhLsdPPzE # hg+/bkLJeRDxAcsUg/npuOGDq8SCzm7jXTCjm8ZTENfAxH/2guw/nrBZLOe5kLbP # j3gPLgYm9k9GOsBhswMi48rtl6V0gb1OOckVQQkCSQXyjyOsjIzIgpIexnufffaw # OeDC5t2rrMpOvx1mtqVnfNZIGMpygpoGh5qbF/P74uhNuaM52UEA3+VxXUf9dSUP # 9LgYzY4kLHrnJulkSQ6QHixMa2ImGNYiGP7ftpe8k8dkvjbGzTouoljlqCqHiJmY # rjPl68x9rPr3+kilKuemvawyLtQ6zb0WzvSKLSv6LvE8DbmuAecnbR8CjDNyeKiV # qnyY7YVKh8xcKXGv20MWFViRNrJwD662RmKjOrrpfEi+LzTVffR7FB9ITRnflMCb # oRiPIm4unHv7zKGFDP2e7QoW17dAy0QGGBeR40Ux/zDFU2YCRMB80OxUYEgmp6jH # 06dIWeR65b/wAm2yb2h0ka4bgSe77B5L/eZFRi2WwY7f7BFC36Hp/fXkMMo5Q8XH # EDQfQtUHWY3xRD1sCiRUT0g9JvA9U2+tRh/UXr+rnHW91EIW2xqrEwLCnwrR6Yqm # H4VK4LSQJ85/mtrDzE0wKOhBcZCPgKSFYxYTXDIXg5q1xeE32Y8i1BYYq3GdG7uX # U7tTnNE3WcLtI2idcLTdyBtXoZowggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZ # AAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMK # V2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0 # IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0 # ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVa # MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT # HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEF # AAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1 # V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9 # alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmv # Haus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928 # jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3t # pK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEe # HT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26o # ElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4C # vEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ug # poMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXps # xREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0C # AwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYE # FCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtT # NRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNo # dHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5o # dG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD # AEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZW # y4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5t # aWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAt # MDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0y # My5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pc # FLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpT # Td2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0j # VOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3 # +SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmR # sqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSw # ethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5b # RAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmx # aQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsX # HRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0 # W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0 # HVUzWLOhcGbyoYIDWTCCAkECAQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFu # ZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo2 # RjFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vy # dmljZaIjCgEBMAcGBSsOAwIaAxUAWxPKLDixcu4ygj3RSJig/nteDBSggYMwgYCk # fjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH # UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD # Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIF # AO6hNU4wIhgPMjAyNjExMTMwNzA1NTBaGA8yMDI2MTExNDA3MDU1MFowdzA9Bgor # BgEEAYRZCgQBMS8wLTAKAgUA7qE1TgIBADAKAgEAAgISGQIB/zAHAgEAAgISazAK # AgUA7qKGzgIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIB # AAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUAA4IBAQB1MG2VkWT2UWPC # WSz+yOhYw3OJWKtMZMB+Q74Zg+M/yzN6syOq4TZdSCG+UQwthWSoroVbcutmqOXI # N3XCdPKHw/XshdUCYh+1CJtExxlQdgr0NlqE3ac3TfvDzYRGDXh2ehw3yBn4mDcR # 0WDsTOaMEUoWlDAO/sqonMPgWy8ox0egUkVM3+J2DldyQdzFjkoAAkiGxMMDbizu # phd3xtAbyASq37rKu9LK9u/WJa01KdGVR0Y3JOpyC5Fhl55kXcLump02P4uwCx+Z # bGOoiNLV5/NQQ8/FgMBI3zxPA5lC2HDglcqBPDMf3moYwOjCafYwUoHGeMoB6Jrl # +4jNPdxAMYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh # c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD # b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw # MTACEzMAAAIzEF+3NtqoQFIAAQAAAjMwDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqG # SIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0BCQQxIgQgA9rxfIz1t4HO # 5/yhsUGJzac652yi0ZVC21kMFqezCQcwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHk # MIG9BCCWue5iC0tIXWaU0QT/Up3MULZUb5U9e96q40RB0g45lzCBmDCBgKR+MHwx # CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt # b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1p # Y3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACMxBftzbaqEBSAAEAAAIz # MCIEIFtx4BwzpW4uC/Y1mvsa920nSCWWE7rWsFjNEU5VABbvMA0GCSqGSIb3DQEB # CwUABIICABxa8mZWTNXBauy8ZAP1S1hqEI/D7oWAHwD4vVeVNXMX6H9NVP7oDASC # R3SEMKW7q6ShKYBRb8Sx6t5PerhF9qO4PW1ugpKZhqTWOntBOIVxhJgVVGP3Hgej # YLtZ9FvL28YsJpV+8YIa7gO5TIIGJpNgGJTDePdjD5E8mmpGdfcgHyS92ar5T5Yl # rj72H2iFUiAD1QJ7vzFN71hd1OzbML2Xvo8IBzGqJqIqMQpXYuwn3u4vLlJe9D7w # PpDvIuwUmAeFTqfXKtp9B3CAdo8oCsgCetzlQaPHncckg1uwl/8aiyrohKku4I/S # /3NgbLuVjdcx5ZA7pAN429bKEb+K9SVpi/QHvLJVRVJDEwu8VMoy0xZQhHGgSvp4 # PwYd+WUAlZGyqJS1S62QAkd3BYWPdbkJ6O+9IJcjsvoq1t7kDD4I6Ayu8Aoz8Bbg # 10HBdi+Ta7u7OLhBxlatCtwVwQujTB80ZRx99IFO1Uydd6g8XubIXpI5ZH67PulU # sYXFllMruV23Zrer5Qb2Ng7evtHBlEkbiUQEwAVq4577RTK249VL6uSUQbYrsuKC # oWdJLpuatDikRjmf4nLv+FRIswIb5DLPeaiiqw1OkSKN5SZm2csCdRsIMHp4uJTg # tIfeXZoehkB0Q9WGH+XCamicJ97GPAqZDpdhL2Tvk5ZBjNWY//UB # SIG # End signature block |