PolicyInsights.Autorest/custom/Start-AzPolicyRemediation.ps1
|
# ---------------------------------------------------------------------------------- # Copyright (c) Microsoft Corporation. All rights reserved. # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # http://www.apache.org/licenses/LICENSE-2.0 # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Code generated by Microsoft (R) AutoRest Code Generator.Changes may cause incorrect behavior and will be lost if the code # is regenerated. # ---------------------------------------------------------------------------------- <# .Synopsis Creates and starts a policy remediation for a policy assignment. .Description The **Start-AzPolicyRemediation** cmdlet creates a policy remediation for a particular policy assignment. All non-compliant resources at or below the remediation's scope will be remediated. This cmdlet can also be used to restart a previously created Remediation that is in a terminal state. Remediation is only supported for policies with the 'deployIfNotExists' and 'modify' effect. .Inputs Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Models.IPolicyInsightsIdentity .Outputs Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Models.IRemediation .Notes COMPLEX PARAMETER PROPERTIES To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables. INPUTOBJECT <IPolicyInsightsIdentity>: Identity Parameter [AttestationName <String>]: The name of the attestation. [AuthorizationNamespace <String>]: The namespace for Microsoft Authorization resource provider; only "Microsoft.Authorization" is allowed. [Id <String>]: Resource identity path [ManagementGroupId <String>]: Management group ID. [ManagementGroupName <String>]: Management group name. [ManagementGroupsNamespace <String>]: The namespace for Microsoft Management RP; only "Microsoft.Management" is allowed. [NextLink <String>]: Next link for list operation. [PolicyAssignmentName <String>]: Policy assignment name. [PolicyDefinitionName <String>]: Policy definition name. [PolicyEventsResource <String>]: The name of the virtual resource under PolicyEvents resource type; only "default" is allowed. [PolicySetDefinitionName <String>]: Policy set definition name. [PolicyStatesResource <String>]: The virtual resource under PolicyStates resource type. In a given time range, 'latest' represents the latest policy state(s), whereas 'default' represents all policy state(s). [PolicyStatesSummaryResource <String>]: The virtual resource under PolicyStates resource type for summarize action. In a given time range, 'latest' represents the latest policy state(s) and is the only allowed value. [RemediationName <String>]: The name of the remediation. [ResourceGroupName <String>]: The name of the resource group. The name is case insensitive. [ResourceId <String>]: Resource ID. [ResourceName <String>]: The name of the policy metadata resource. [SubscriptionId <String>]: The ID of the target subscription. .Link https://learn.microsoft.com/powershell/module/az.policyinsights/start-azpolicyremediation #> function Start-AzPolicyRemediation { [OutputType([Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Models.IRemediation])] [CmdletBinding(DefaultParameterSetName='CreateBySubscriptionId', PositionalBinding=$false, SupportsShouldProcess, ConfirmImpact='Medium')] param( [Parameter(ParameterSetName='CreateByManagementGroup', Mandatory)] [Alias('ManagementGroupName')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Path')] [System.String] # Management group ID. ${ManagementGroupId}, [Parameter(ParameterSetName='CreateByManagementGroup', Mandatory)] [Parameter(ParameterSetName='CreateBySubscriptionId', Mandatory)] [Parameter(ParameterSetName='CreateByResourceGroup', Mandatory)] [Parameter(ParameterSetName='CreateByResourceId', Mandatory)] [Parameter(ParameterSetName='CreateByScope', Mandatory)] [Alias('RemediationName')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Path')] [System.String] # The name of the remediation. ${Name}, [Parameter(ParameterSetName='CreateBySubscriptionId')] [Parameter(ParameterSetName='CreateByResourceGroup')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Path')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Runtime.DefaultInfo(Script='(Get-AzContext).Subscription.Id')] [System.String] # The ID of the target subscription. Uses current subscription if one isn't provided. ${SubscriptionId}, [Parameter(ParameterSetName='CreateByResourceGroup', Mandatory)] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Path')] [System.String] # Resource group name. ${ResourceGroupName}, [Parameter(ParameterSetName='CreateByResourceId', Mandatory)] [Alias('Id')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Path')] [System.String] # ID of the resource that the remediation is being created for. ${ResourceId}, [Parameter(ParameterSetName='CreateViaIdentity', Mandatory, ValueFromPipeline)] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Path')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Models.IPolicyInsightsIdentity] # Identity Parameter ${InputObject}, [Parameter()] [Alias('FailureThreshold')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.Single] # A number between 0.0 to 1.0 representing the percentage failure threshold. # The remediation will fail if the percentage of failed remediation operations (i.e. # failed deployments) exceeds this threshold. ${FailureThresholdPercentage}, [Parameter()] [AllowEmptyCollection()] [Alias('LocationFilter')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.String[]] # The resource locations that should be included in the remediation. # Resources that don't reside in these locations will not be remediated. ${FilterLocation}, [Parameter()] [AllowEmptyCollection()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.String[]] # The IDs of the resources that will be remediated. # Can specify at most 100 IDs. # This filter cannot be used when ReEvaluateCompliance is set to ReEvaluateCompliance. # This filter cannot be empty if provided, or the remediation won't target any resources. ${FilterResourceId}, [Parameter()] [Alias('ParallelDeploymentCount')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.Int32] # Determines how many resources to remediate at any given time. # Can be used to increase or reduce the pace of the remediation. # If not provided, the default parallel deployments value is used. ${ParallelDeployment}, [Parameter(ParameterSetName='CreateByManagementGroup', Mandatory)] [Parameter(ParameterSetName='CreateBySubscriptionId', Mandatory)] [Parameter(ParameterSetName='CreateByResourceGroup', Mandatory)] [Parameter(ParameterSetName='CreateByResourceId', Mandatory)] [Parameter(ParameterSetName='CreateByScope', Mandatory)] [Parameter(ParameterSetName='CreateViaIdentity')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.String] # The resource ID of the policy assignment that should be remediated. # E.g. '/subscriptions/\{subscriptionId}/providers/Microsoft.Authorization/policyAssignments/\{assignmentName}'. ${PolicyAssignmentId}, [Parameter()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.String] # The policy definition reference ID of the individual definition that should be remediated. # Required when the policy assignment being remediated assigns a policy set definition. ${PolicyDefinitionReferenceId}, [Parameter()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.Int32] # Determines the max number of non-compliant resources that can be remediated by the remediation job. # If not provided, the default resource count is used. ${ResourceCount}, [Parameter()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.PSArgumentCompleterAttribute("ExistingNonCompliant", "ReEvaluateCompliance")] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Body')] [System.String] # Describes how the remediation task will discover resources that need to be remediated. # ReEvaluateCompliance is not supported when remediating management group scopes. # Defaults to ExistingNonCompliant if not specified. ${ResourceDiscoveryMode}, [Parameter(ParameterSetName='CreateByScope', Mandatory)] [System.String] # Scope of the resource. E.g. '/subscriptions/\{subscriptionId}/resourceGroups/\{rgName}'. ${Scope}, [Parameter()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [System.Management.Automation.SwitchParameter] # Run cmdlet in the background. ${AsJob}, [Parameter()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [System.Management.Automation.SwitchParameter] # Run the command asynchronously. ${NoWait}, [Parameter()] [Alias('AzureRMContext', 'AzureCredential')] [ValidateNotNull()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Azure')] [System.Management.Automation.PSObject] # The DefaultProfile parameter is not functional. # Use the SubscriptionId parameter when available if executing the cmdlet against a different subscription. ${DefaultProfile}, [Parameter(DontShow)] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [System.Management.Automation.SwitchParameter] # Wait for .NET debugger to attach ${Break}, [Parameter(DontShow)] [ValidateNotNull()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Runtime.SendAsyncStep[]] # SendAsync Pipeline Steps to be appended to the front of the pipeline ${HttpPipelineAppend}, [Parameter(DontShow)] [ValidateNotNull()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Runtime.SendAsyncStep[]] # SendAsync Pipeline Steps to be prepended to the front of the pipeline ${HttpPipelinePrepend}, [Parameter(DontShow)] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [System.Uri] # The URI for the proxy server to use ${Proxy}, [Parameter(DontShow)] [ValidateNotNull()] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [System.Management.Automation.PSCredential] # Credentials for a proxy server to use for the remote call ${ProxyCredential}, [Parameter(DontShow)] [Microsoft.Azure.PowerShell.Cmdlets.PolicyInsights.Category('Runtime')] [System.Management.Automation.SwitchParameter] # Use the default credentials for the proxy ${ProxyUseDefaultCredentials} ) process { # Make a copy of the original Parameters $originalParameters = @{} foreach($key in $PSBoundParameters.Keys) { $originalParameters[$key] = $PSBoundParameters[$key] } # Generated code can't parse which scope of InputObject is being passed in so it's easiest to parse it into other parameters if($PSBoundParameters.ContainsKey("InputObject")) { # extract scope from the InputObject's Id and add to Parameters $idSplit = $InputObject.Id -split '/providers/microsoft\.policyinsights/remediations/' $null = $PSBoundParameters.Add("Scope", $idSplit[0]) $null = $PSBoundParameters.Add("Name", $idSplit[1]) # remove the InputObject parameter $null = $PSBoundParameters.Remove("InputObject") } # pre process the "Scope" parameter into other parameters if it's present if($PSBoundParameters.ContainsKey("Scope")) { # processing the Scope parameter with a helper method $Scope = $PSBoundParameters["Scope"] $scopeObject = ParseScope $Scope switch ($scopeObject.ScopeType) { 'mgname' { $null = $PSBoundParameters.Add("ManagementGroupId", $scopeObject.ManagementGroupName) } 'rgname' { $null = $PSBoundParameters.Add("SubscriptionId", $scopeObject.SubscriptionId) $null = $PSBoundParameters.Add("ResourceGroupName", $scopeObject.ResourceGroupName) } 'subId' { $null = $PSBoundParameters.Add("SubscriptionId", $scopeObject.SubscriptionId) } 'resource' { $null = $PSBoundParameters.Add("ResourceId", $scopeObject.Resource) } default { throw "The provided scope '$Scope' is not valid for this cmdlet. Supported scopes are management group, resource group, subscription, and resource." } } $null = $PSBoundParameters.Remove("Scope") } # Check if AsJob switch was used and setup a job to run and call the cmdlet within it if($PSBoundParameters.ContainsKey("AsJob")) { $null = $PSBoundParameters.Remove("AsJob") # Remove HTTP pipeline parameters that can't be serialized $nonSerializableParams = @('HttpPipelinePrepend', 'HttpPipelineAppend', 'Break') foreach ($param in $nonSerializableParams) { if ($PSBoundParameters.ContainsKey($param)) { $null = $PSBoundParameters.Remove($param) } } # Save context to a temp file for the job to import $contextFilePath = [System.IO.Path]::GetTempFileName() $null = Save-AzContext -Path $contextFilePath -Force # ScriptBlock for Start-Job to call, it does the necessary env setup required to run the cmdlet in a fresh powershell process $scriptCmd = { param($InputParameters, $ScriptRoot, $ContextFilePath) # Load the main module which handles Az.Accounts integration and proper initialization $mainModulePath = Join-Path $ScriptRoot '..\Az.PolicyInsights.psd1' if(Test-Path $mainModulePath) { $null = Import-Module -Name $mainModulePath -Force } # Restore the Azure context in the job $null = Import-AzContext -Path $ContextFilePath # Clean up the temp file Remove-Item -Path $ContextFilePath -Force -ErrorAction SilentlyContinue & Start-AzPolicyRemediation @InputParameters } $parametersHashtable = [hashtable]$PSBoundParameters $output = Start-Job -ScriptBlock $scriptCmd -ArgumentList $parametersHashtable, $PSScriptRoot, $contextFilePath return $output } # if NoWait is present, call the internal cmdlet and return that output immediately if($PSBoundParameters.ContainsKey("NoWait")) { $null = $PSBoundParameters.Remove("NoWait") $output = Az.PolicyInsights.internal\New-AzPolicyRemediation @PSBoundParameters $PSCmdlet.WriteObject($output, $true) return } # since NoWait isn't present, we'll start the remediation and poll it until it's reached a terminal state $remediation = Az.PolicyInsights.internal\New-AzPolicyRemediation @PSBoundParameters # Remove parameters that can't be passed to Get-AzPolicyRemediation in the polling loop $scopeParams = RemoveNonIdentifyingParameters -InputParameterDictionary $PSBoundParameters $remediationStatus = $remediation.ProvisioningState $terminalStates = @("Succeeded", "Failed", "Canceled", "Complete") # Polling loop to check if remediation has finished while ($remediationStatus -inotin $terminalStates) { Write-Debug "Delay between polling calls. Current remediation status: '$remediationStatus'. Waiting for 30 seconds before checking again..." Start-Sleep -Seconds 30 # Call Get-AzPolicyRemediation to check the status again $remediation = Get-AzPolicyRemediation @scopeParams $remediationStatus = $remediation.ProvisioningState } $output = $remediation $PSCmdlet.WriteObject($output, $true) # Restoring original parameters to ensure safety in piping scenarios $PSBoundParameters.Clear() foreach($key in $originalParameters.Keys) { $PSBoundParameters[$key] = $originalParameters[$key] } } } # SIG # Begin signature block # MIInbgYJKoZIhvcNAQcCoIInXzCCJ1sCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAkBMcWN15ZZYMz # bnDpqP1GR8s+ROV5WFN1EgOX5H1pMqCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghn7MIIZ9wIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI # hvcNAQkEMSIEIJUDiNFMDqFo38mXMT2ZegSBJfBX1QEZzMCGU91QLQN3MEIGCisG # AQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3 # Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAACAOMESd1VQJknofRLBN # 8UUr+uJFbnPHioHDhy0ojdiq9HIElseQ98ZLwdaWfpBp6glLYr7YJPULkMwFvpMf # T8/D9A/eU1y7VsImnZMjuhnA/a4ZDXnLIz2p1mPCB3w0EYuAWUWp7rQgnqQ8UsVF # 3xSwYb5u5DkN2fM2dIiJrtbtGIipiw0PP3q88Y3YBwJq1mgmSklqXniB8MI6R/Pn # tIGTU6LYVnCksWe507aAuFTsvCv3lpGk1slfrUgVZekRTjG25qqnFzAknUUFl2qh # kaPZ3MkKvj+ulS1TamgCXtb+h8efiId6TjuIMszZe6EoNcWskQsokYcjFHO4l1GN # yqGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheC # AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIB # QQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCCOkjPynqnPqAqEq3+h # WhtCPaFeDOII2z814Z6KzUCwWQIGahF0rhgoGBMyMDI2MDUyNzEwMjI1My4zMzha # MASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv # bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0 # aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0 # ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1NTFBLTA1RTAtRDk0NzElMCMG # A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKAD # AgECAhMzAAACG9CyuAJn93LPAAEAAAIbMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m # dCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgzMFoXDTI2MTExMzE4 # NDgzMFowgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTAr # BgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUG # A1UECxMeblNoaWVsZCBUU1MgRVNOOjU1MUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxN # aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC # Ag8AMIICCgKCAgEAjsWd52ZZkzB5Xe5g/l2GsOjAz30sg6jVxfFJV+w4xIDVyaI3 # LO8bIpmzYul3AZHg50UIQ8PrSRZGpQqFkRNu+o3YKJ4g2uGYBRksHnHYR0uVSCQg # 58ThkYyeplGX3oAvGRVuPIpQtAiTsR76A/gdoU7HDwEbb73bJwTyrbKHhR+WaMy9 # DQHI4k5Qo4+bZDs0kj76bvhJvdGU+S8zxQBp7UAhjJnFqKxIusSITE7zCCR422EL # hkhVVOFqK2w6h1MAvILe76hxRIcPj0SBL2r8O9tx5njU4+tg2rAdU153pmyhqazd # pUccYBE9wDRFUd/e9CoWx7TdnUicB+Mai7RT6qse7e5aGqX1B7bnj/ZHvrrfF+BJ # EIlS9iDXAUgekvXZ+FZmjvLwP+dN+0/crh++r4e8FknF7EX6IJfnmNeDN/68Z59k # baJ1f+P5mnKYfydCeZmxrGpS0taWkDk36D3jPVZflvxrc+1rhCIlM5v9agLEFI12 # QiBTfpOBOBr3AGCPk+eH0+latjQajug+2/BD12qb82500LQytUWT2ota/HYnRgSv # 1jvZ0/dml1FsxWYzOnCrjfdB/7N6pNySt4vn+PGN6dFLim7kxos+B9WfQPezJi3f # uKyyDAB9zSHPj1Zu8nZfecZJ9um4zj7DFgvJXTDTnG5qlG4ZdbFRa/rrfzkCAwEA # AaOCAUkwggFFMB0GA1UdDgQWBBS2vp93/lxLppNK8OkauJ2AvNmIUDAfBgNVHSME # GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw # Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l # LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG # AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p # Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB # Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN # BgkqhkiG9w0BAQsFAAOCAgEAZkU1XxQD4OTM3GTht32TXShIfPBoMfSsFsBQqFOZ # qLJOxyJOllIBFpmpvOtGNPkC5Z8ldG8aCpvgFNo/jDWeT5FiW53dAj9KnZxpsQ3P # f5fRzSGHRcxEMOdXIVzDJwcZUX0cjfxna7ydNv8eXB/Xk6G6SyrR2OH6S1LHMW11 # m3UvKF+eLjIPl45rximuDCoEd+ad0lOAXA5/vZOKN5n/ePYeP0LRchZX0Q6H8n/Z # mSPMlbli3MO851Q09RmT/ZGHa+/Fdy+WLDrwcYykV9mUy/4TbwKw6FtdR6ZPHxMd # Ii1pk8Y2mC/GzCq0LCsH0uTFeQ6Q7Nc3MRmER/3mLWUhbaWHgX1FbYchvR22b+Bu # p+YPR5Q/0BhaaAN6AIBfcGs+u/nJoIByyZKA8cTyCmnUI/4vW6D4vywg3XBFf4f2 # DwFHy/evsC+58KMl+k2wa05X2kK0T/bCPLhaov9ZXyobawfNOLYGiauKT2FWvbwZ # zHIFCTxjBww6Pt5uRvCE/jnUcf/xhlOGMn6iKO9Xt49vZTE2SfIBk/34iLTRBJ6H # 7aGPTTQnza3OfWu1/dRycC6Wl5ons3PjnGXTSKSxXllJPmg6R/ulGonP/UCYoJ6m # N+EXjfyDLPXLqsr91+VTG1rYzRCjPwBFAHv4EIwaE0ajCrf75eUGI3+oXU0UP6rl # oZ8wggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB # CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD # VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe # Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm # TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H # ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc # wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A # W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w # jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG # MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ # 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP # 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz # ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz # NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3 # xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG # AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/ # LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG # DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m # dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB # BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G # A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw # VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j # cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF # BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br # aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL # BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC # cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF # vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l # 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn # 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m # O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx # TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4 # S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9 # y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM # +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw # RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4C # AQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv # bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0 # aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0 # ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo1NTFBLTA1RTAtRDk0NzElMCMG # A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIa # AxUAhoV6r49M4GBd41K1RYB1Z0f4zuCggYMwgYCkfjB8MQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T # dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO3BONswIhgPMjAyNjA1Mjcw # OTMzMTVaGA8yMDI2MDUyODA5MzMxNVowdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA # 7cE42wIBADAHAgEAAgILKzAHAgEAAgIR4TAKAgUA7cKKWwIBADA2BgorBgEEAYRZ # CgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0G # CSqGSIb3DQEBCwUAA4IBAQBoRkFgXg00dNmCiA6PPsobZ2ZrKz1FSd5ywpZmBH2+ # DlLqtIFYUyNLF9eeD76dTUrjNV7mmC4cAyu3C7gxLdx5E0ZuHgIqhMvScgtvA7hp # 6KNZC69V2bn42QN43vHg7vGA0urGvRAE4iDYdV+jCWYRd8BACMYsJkWENtoKumpd # Lrk/eN0xYJYnH8hg30rtnLunDRJeSJ4ODvOdcOZfS4rElriv8a+FUFvt95+hKO1N # 4EQ+iRT6T6nw8FSlvcKgrFjabkzZLfqDGfwz+IQh7MOfloMRa7FJ/eezzJJlWxE1 # eOD4mLqcmsME8ioM0CnW6UYTvGdh7C0Y0g/z0Pt2vf5kMYIEDTCCBAkCAQEwgZMw # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIb0LK4Amf3cs8AAQAA # AhswDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRAB # BDAvBgkqhkiG9w0BCQQxIgQg9bFv3dcY3ZzWnZeTUyGNbo0RWXuH9em4cFYdnYo7 # pzowgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCAwJRSVuD2jmMcQCFXdLuJA # wDpUVNZ6bc6dfJU83Q2LgDCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwAhMzAAACG9CyuAJn93LPAAEAAAIbMCIEIDPplANOBr3l3lMhaw0h4UYJ # +ZlcRc7kw79bdMAP6S++MA0GCSqGSIb3DQEBCwUABIICACalmBOPOmvp1kTIe6om # erMcP7wR+74cR7fSXsh+Jg7KDzMfHvINS9PmAqPsYB8XXYWhidOjhD+ymrIFA/uo # X+6cVm+WvqhqkLUHJ1BgCzI2bWvxuoRTG2gAMpfdQieQzg1eMsdrNaNV2sNhIOxg # mVg5CsD6d0rHKFf8HVmqtWZ/6HPAlVrHLIxJCxcjS6i0xwuI1hUJiHxhy+3zvAaD # 7zD5z4YsfJavJPBsK4JVae1XD9GivJ36satQosp+2sCTC/GacJQ0lTRJpCFSOLKr # r3dJIUQe/0fY/r4Uws70AhdPOFs8YugduIgJGwuZPSGgDb1Ej6FjvYX4jYAqM914 # iXpccUWVbDm/5iUHRh+s4cK5eQPoflCJ4NdUrCEozWEVdJcpbRqWvfOuLk1hTGzl # Cc/m4YMgpvUWR7zYOH1MQCy2DkvHbO+vvBD5zxZYLtTpWVFz4gNflyos8sA6ONBG # fq1rPWieOmF9WIwiFMyyVaQXPmI++XsjoaHElfszLSuFGRzAjYtsBBbE2GmcYjzU # h2gnglmHVZfUDqlm3TULgONoi8pxWH2E47mjdLY6BtD9aul9ccTz9P2ArsVioROh # vwahMhOFzp35PlkPZIgbFaFwh6RVDPGbb2Zv+rwiUTRNtUJ3JwSORPKeR27YXN2y # jmb/wxRxQPUE+2prfa+ZKAK5 # SIG # End signature block |