rules/Azure.Common.Rule.ps1
# Copyright (c) Microsoft Corporation. # Licensed under the MIT License. # # Helper functions for rules # # Add a custom function to filter by resource type function global:ResourceType { [CmdletBinding()] [OutputType([System.Boolean])] param ( [Parameter(Mandatory = $True)] [String]$ResourceType ) process { return $PSRule.TargetType -eq $ResourceType; } } function global:ExtensionResourceType { [CmdletBinding()] [OutputType([System.Boolean])] param ( [Parameter(Mandatory = $True)] [String]$ResourceType ) process { return $TargetObject.ExtensionResourceType -eq $ResourceType; } } # Get sub resources of a specific resource type function global:GetSubResources { [CmdletBinding()] [OutputType([PSObject[]])] param ( [Parameter(Mandatory = $True)] [String[]]$ResourceType, [Parameter(Mandatory = $False)] [String[]]$Name ) process { return @($TargetObject.resources | Where-Object -FilterScript { ($_.ResourceType -in $ResourceType -or $_.Type -in $ResourceType -or $_.ExtensionResourceType -in $ResourceType) -and ($Null -eq $Name -or $Name.Length -eq 0 -or $_.Name -in $Name -or $_.ResourceName -in $Name) }) } } # Certain rules only apply if resource data has been exported function global:IsExport { [CmdletBinding()] [OutputType([System.Boolean])] param () process { return $Null -ne $TargetObject.SubscriptionId; } } function global:HasPeerNetwork { [CmdletBinding()] [OutputType([System.Boolean])] param () process { if ($PSRule.TargetType -ne 'Microsoft.Network/virtualNetworks') { return $False; } $peers = $TargetObject.Properties.virtualNetworkPeerings; if ($Null -eq $peers) { return $False; } $item = @($peers); return $item.Length -gt 0; } } function global:SupportsAcceleratedNetworking { [CmdletBinding()] param () process { if ($PSRule.TargetType -ne 'Microsoft.Compute/virtualMachines' -or !(IsExport)) { return $False; } if ($Null -eq ($TargetObject.Resources | Where-Object { $_.ResourceType -eq 'Microsoft.Network/networkInterfaces' })) { return $False; } $vmSize = $TargetObject.Properties.hardwareProfile.vmSize; if ($vmSize -notLike 'Standard_*_*') { if ($vmSize -match '^Standard_(F|B[1-2][0-9]ms)') { return $True; } else { return $False; } } $vmSizeParts = $vmSize.Split('_'); if ($Null -eq $vmSizeParts) { return $False; } $generation = $vmSizeParts[2]; $size = $vmSizeParts[1]; # Generation v2 if ($generation -eq 'v2') { if ($size -notMatch '^(A|NC|DS1$|D1$|F[1-2]s)') { return $True; } } # Generation v3 elseif ($generation -eq 'v3') { if ($size -notMatch '^(E2s?|E[2-8]-2|D2s?|NC)') { return $True; } } return $False; } } function global:IsWindowsOS { [CmdletBinding()] [OutputType([System.Boolean])] param () process { if ($PSRule.TargetType -notIn 'Microsoft.Compute/virtualMachines', 'Microsoft.Compute/virtualMachineScaleSets') { return $False; } return ($TargetObject.Properties.storageProfile.osDisk.osType -eq 'Windows') -or ($TargetObject.Properties.storageProfile.imageReference.publisher -in 'MicrosoftSQLServer', 'MicrosoftWindowsServer', 'MicrosoftVisualStudio', 'MicrosoftWindowsDesktop') -or ($TargetObject.Properties.virtualMachineProfile.storageProfile.osDisk.osType -eq 'Windows') -or ($TargetObject.Properties.virtualMachineProfile.storageProfile.imageReference.publisher -in 'MicrosoftSQLServer', 'MicrosoftWindowsServer', 'MicrosoftVisualStudio', 'MicrosoftWindowsDesktop') } } function global:IsWindowsClientOS { [CmdletBinding()] [OutputType([System.Boolean])] param () process { if ($PSRule.TargetType -notIn 'Microsoft.Compute/virtualMachines', 'Microsoft.Compute/virtualMachineScaleSets') { return $False; } return $TargetObject.Properties.storageProfile.imageReference.publisher -eq 'MicrosoftWindowsDesktop'; } } function global:SupportsHybridUse { [CmdletBinding()] [OutputType([System.Boolean])] param () process { if ($PSRule.TargetType -ne 'Microsoft.Compute/virtualMachines') { return $False; } return ( ($TargetObject.Properties.storageProfile.osDisk.osType -eq 'Windows') -or ($TargetObject.Properties.storageProfile.imageReference.publisher -in 'MicrosoftSQLServer', 'MicrosoftWindowsServer') ) -and !(IsWindowsClientOS); } } function global:IsLinuxOS { [CmdletBinding()] [OutputType([System.Boolean])] param () process { if ($PSRule.TargetType -ne 'Microsoft.Compute/virtualMachines') { return $False; } return $TargetObject.Properties.storageProfile.osDisk.osType -eq 'Linux'; } } $Global:FlagSupportsTagWarning = $True; # Determines if the object supports tags function global:SupportsTags { [CmdletBinding()] [OutputType([System.Boolean])] param ( [String]$TargetType = $PSRule.TargetType ) begin { if ($Global:FlagSupportsTagWarning) { Write-Warning -Message "The 'SupportsTags' PowerShell function has been replaced with the selector 'Azure.Resource.SupportsTags'. The 'SupportsTags' function is deprecated and will no longer work in the next major version. Please update your PowerShell rules to the selector instead. See https://aka.ms/ps-rule-azure/upgrade."; $Global:FlagSupportsTagWarning = $False; } } process { if ( ($TargetType -eq 'Microsoft.Subscription') -or ($TargetType -eq 'Microsoft.Resources/deployments') -or ($TargetType -eq 'Microsoft.AzureActiveDirectory/b2ctenants') -or ($TargetType -notLike 'Microsoft.*/*') -or ($TargetType -like 'Microsoft.Addons/*') -or ($TargetType -like 'Microsoft.Advisor/*') -or ($TargetType -like 'Microsoft.Authorization/*') -or ($TargetType -like 'Microsoft.Billing/*') -or ($TargetType -like 'Microsoft.Blueprint/*') -or ($TargetType -like 'Microsoft.Capacity/*') -or ($TargetType -like 'Microsoft.Classic*') -or ($TargetType -like 'Microsoft.Consumption/*') -or ($TargetType -like 'Microsoft.Gallery/*') -or ($TargetType -like 'Microsoft.Security/*') -or ($TargetType -like 'microsoft.support/*') -or ($TargetType -like 'Microsoft.WorkloadMonitor/*') -or ($TargetType -like '*/providers/roleAssignments') -or ($TargetType -like '*/providers/diagnosticSettings') -or # Exclude sub-resources by default ($TargetType -like 'Microsoft.*/*/*' -and !( $TargetType -eq 'Microsoft.Automation/automationAccounts/runbooks' -or $TargetType -eq 'Microsoft.Automation/automationAccounts/configurations' -or $TargetType -eq 'Microsoft.Automation/automationAccounts/compilationjobs' -or $TargetType -eq 'Microsoft.Automation/automationAccounts/modules' -or $TargetType -eq 'Microsoft.Automation/automationAccounts/nodeConfigurations' -or $TargetType -eq 'Microsoft.Automation/automationAccounts/python2Packages' -or $TargetType -eq 'Microsoft.Automation/automationAccounts/watchers' -or $TargetType -eq 'Microsoft.Resources/templateSpecs/versions' )) -or # Some exception to resources (https://docs.microsoft.com/azure/azure-resource-manager/management/tag-support#microsoftresources) ($TargetType -like 'Microsoft.Resources/*' -and !( $TargetType -eq 'Microsoft.Resources/deploymentScripts' -or $TargetType -eq 'Microsoft.Resources/resourceGroups' -or $TargetType -eq 'Microsoft.Resources/templateSpecs' -or $TargetType -eq 'Microsoft.Resources/templateSpecs/versions' )) -or # Some exception to resources (https://docs.microsoft.com/azure/azure-resource-manager/management/tag-support#microsoftinsights) ($TargetType -like 'Microsoft.Insights/*' -and !( $TargetType -eq 'Microsoft.Insights/actionGroups' -or $TargetType -eq 'Microsoft.Insights/activityLogAlerts' -or $TargetType -eq 'Microsoft.Insights/alertRules' -or $TargetType -eq 'Microsoft.Insights/autoscaleSettings' -or $TargetType -eq 'Microsoft.Insights/components' -or $TargetType -eq 'Microsoft.Insights/dataCollectionEndpoints' -or $TargetType -eq 'Microsoft.Insights/dataCollectionRules' -or $TargetType -eq 'Microsoft.Insights/guestDiagnosticSettings' -or $TargetType -eq 'Microsoft.Insights/metricAlerts' -or $TargetType -eq 'Microsoft.Insights/notificationGroups' -or $TargetType -eq 'Microsoft.Insights/privateLinkScopes' -or $TargetType -eq 'Microsoft.Insights/scheduledQueryRules' -or $TargetType -eq 'Microsoft.Insights/webTests' -or $TargetType -eq 'Microsoft.Insights/workbooks' -or $TargetType -eq 'Microsoft.Insights/workbookTemplates' )) -or # Some exceptions to resources (https://docs.microsoft.com/azure/azure-resource-manager/management/tag-support#microsoftcostmanagement) ($TargetType -like 'Microsoft.CostManagement/*' -and !( $TargetType -eq 'Microsoft.CostManagement/Connectors' )) ) { return $False; } return $True; } } # Determines if the object supports regions function global:SupportsRegions { [CmdletBinding()] [OutputType([System.Boolean])] param () process { if ( ($PSRule.TargetType -eq 'Microsoft.Subscription') -or ($PSRule.TargetType -eq 'Microsoft.AzureActiveDirectory/b2cDirectories') -or ($PSRule.TargetType -eq 'Microsoft.Network/trafficManagerProfiles') -or ($PSRule.TargetType -like 'Microsoft.Authorization/*') -or ($PSRule.TargetType -like 'Microsoft.Consumption/*') -or ($PSRule.TargetType -like '*/providers/roleAssignments') -or ($TargetObject.Location -eq 'global') ) { return $False; } return $True; } } function global:ConvertToUInt64 { param ( [Parameter(Mandatory = $True)] [System.Net.IPAddress]$IP ) process { $bytes = $IP.GetAddressBytes(); $size = $bytes.Length; [System.UInt64]$result = 0; for ($i = 0; $i -lt $size; $i++) { $result = ($result -shl 8) + $bytes[$i]; } return $result; } } function global:GetIPAddressCount { [CmdletBinding()] [OutputType([System.UInt64])] param ( [Parameter(Mandatory = $True)] [String]$Start, [Parameter(Mandatory = $True)] [String]$End ) process { $startIP = [System.Net.IPAddress]::Parse($Start); $endIP = [System.Net.IPAddress]::Parse($End); $startAddress = ConvertToUInt64 -IP $startIP; $endAddress = ConvertToUInt64 -IP $endIP; if ($endAddress -ge $startAddress) { return $endAddress - $startAddress + 1; } else { return $startAddress - $endAddress + 1; } } } function global:GetIPAddressSummary { [CmdletBinding()] [OutputType([PSObject])] param () process { $firewallRules = @($TargetObject.resources | Where-Object -FilterScript { $_.Type -like "*/firewallRules" } | ForEach-Object -Process { if (!($_.ResourceName -eq 'AllowAllWindowsAzureIps' -or ($_.properties.startIpAddress -eq '0.0.0.0' -and $_.properties.endIpAddress -eq '0.0.0.0'))) { $_; } }) $private = 0; $public = 0; foreach ($fwRule in $firewallRules) { if ($fwRule.Properties.startIpAddress -like "10.*" -or $fwRule.Properties.startIpAddress -like "172.*" -or $fwRule.Properties.startIpAddress -like "192.168.*") { $private += GetIPAddressCount -Start $fwRule.Properties.startIpAddress -End $fwRule.Properties.endIpAddress; } else { $public += GetIPAddressCount -Start $fwRule.Properties.startIpAddress -End $fwRule.Properties.endIpAddress; } } return [PSCustomObject]@{ Private = $private Public = $public } } } function global:GetCIDRMask { [CmdletBinding()] [OutputType([PSObject])] param ( [Parameter(Mandatory = $True)] [String]$CIDR ) process { $cidrParts = $CIDR.Split('/'); $ip = ConvertToUInt64 -IP ([System.Net.IPAddress]::Parse($cidrParts[0])); [System.UInt64]$mask = 4294967295; if ($cidrParts.Length -eq 2) { $mask = [System.UInt64](4294967295 -shl (32 - ([System.Byte]::Parse($cidrParts[1])))) -band 4294967295; } return [PSCustomObject]@{ Mask = $mask IP = $ip; } } } function global:WithinCIDR { [CmdletBinding()] [OutputType([System.Boolean])] param ( [Parameter(Mandatory = $True)] [String]$IP, [Parameter(Mandatory = $True)] [String[]]$CIDR ) process { [System.UInt64]$address = ConvertToUInt64 -IP ([System.Net.IPAddress]::Parse($IP)); $result = $False; for ($i = 0; (($i -lt $CIDR.Length) -and (!$result)); $i++) { $mask = GetCIDRMask -CIDR $CIDR[$i]; $result = ($mask.Mask -band $address) -eq $mask.IP; } return $result; } } # Determine if the VM is using a promo SKU. function global:IsVMPromoSku { process { if ($PSRule.TargetType -ne 'Microsoft.Compute/virtualMachines') { return $False; } return $TargetObject.Properties.hardwareProfile.vmSize -like '*_Promo'; } } # Normalizes the location for comparison. function global:GetNormalLocation { [CmdletBinding()] [OutputType([String])] param ( [Parameter(Mandatory = $True)] [AllowEmptyString()] [String]$Location ) process { return $Location.Replace(' ', '').ToLower(); } } function global:GetAvailabilityZone { [CmdletBinding()] [OutputType([String[]])] param ( [Parameter(Mandatory = $True)] [AllowEmptyString()] [string]$Location, [Parameter(Mandatory = $True)] [AllowEmptyCollection()] [PSObject[]]$Zone ) process { $normalizedLocation = GetNormalLocation -Location $Location; $availabilityZones = $Zone | Where-Object { (GetNormalLocation -Location $_.Location) -eq $normalizedLocation } | Select-Object -ExpandProperty Zones -First 1; return $availabilityZones | Sort-Object { [int]$_ }; } } function global:PrependConfigurationZoneWithProviderZone { [CmdletBinding()] [OutputType([PSObject[]])] param ( [Parameter(Mandatory = $True)] [AllowEmptyCollection()] [PSObject[]]$ConfigurationZone, [Parameter(Mandatory = $True)] [AllowEmptyCollection()] [PSObject[]]$ProviderZone ) process { if ($ConfigurationZone.Length -gt 0) { # Prepend configuration options and provider mappings together # We put configuration options at the beginning so they are processed first return @($ConfigurationZone) + @($ProviderZone); } return $ProviderZone; } } # SIG # Begin signature block # MIInngYJKoZIhvcNAQcCoIInjzCCJ4sCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDNZa4LISApwlzP # e3oJG8CRoGigigq5lHCf/O6FnJYUWaCCDXYwggX0MIID3KADAgECAhMzAAACURR2 # zMWFg24LAAAAAAJRMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD # VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p # bmcgUENBIDIwMTEwHhcNMjEwOTAyMTgzMjU5WhcNMjIwOTAxMTgzMjU5WjB0MQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy # b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB # AQDBIpXR3b1IYAMunV9ZYBVYsaA7S64mqacKy/OJUf0Lr/LW/tWlJDzJH9nFAhs0 # zzSdQQcLhShOSTUxtlwZD9dnfIcx4pZgu0VHkqQw2dVc8Ob21GBo5sVrXgEAQxZo # rlEuAl20KpSIFLUBwoZFGFSQNSMcqPudXOw+Mhvn6rXYv/pjXIjgBntn6p1f+0+C # 2NXuFrIwjJIJd0erGefwMg//VqUTcRaj6SiCXSY6kjO1J9P8oaRQBHIOFEfLlXQ3 # a1ATlM7evCUvg3iBprpL+j1JMAUVv+87NRApprPyV75U/FKLlO2ioDbb69e3S725 # XQLW+/nJM4ihVQ0BHadh74/lAgMBAAGjggFzMIIBbzAfBgNVHSUEGDAWBgorBgEE # AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUMLgM7NX5EnpPfK5uU6FPvn2g/Ekw # RQYDVR0RBD4wPKQ6MDgxHjAcBgNVBAsTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEW # MBQGA1UEBRMNMjMwMDEyKzQ2NzU5NjAfBgNVHSMEGDAWgBRIbmTlUAXTgqoXNzci # tW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vd3d3Lm1pY3Jvc29mdC5j # b20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3JsMGEG # CCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQu # Y29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDExXzIwMTEtMDctMDguY3J0 # MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIBAIVJlff+Fp0ylEJhmvap # NVv1bYLSWf58OqRRIDnXbHQ+FobsOwL83/ncPC3xl8ySR5uK/af4ZDy7DcDw0yEd # mKbRLzHIfcztZVSrlsg0GKwZuaB2MEI1VizNCoZlN+HlFZa4DNm3J0LhTWrZjVR0 # M6V57cFW0GsV4NlqmtelT9JFEae7PomwgAV9xOScz8HzvbZeERcoSRp9eRsQwOw7 # 8XeCLeglqjUnz9gFM7RliCYP58Fgphtkht9LNEcErLOVW17m6/Dj75zg/IS+//6G # FEK2oXnw5EIIWZraFHqSaee+NMgOw/R6bwB8qLv5ClOJEpGKA3XPJvS9YgOpF920 # Vu4Afqa5Rv5UJKrsxA7HOiuH4TwpkP3XQ801YLMp4LavXnvqNkX5lhFcITvb01GQ # lcC5h+XfCv0L4hUum/QrFLavQXJ/vtirCnte5Bediqmjx3lswaTRbr/j+KX833A1 # l9NIJmdGFcVLXp1en3IWG/fjLIuP7BqPPaN7A1tzhWxL+xx9yw5vQiT1Yn14YGmw # OzBYYLX0H9dKRLWMxMXGvo0PWEuXzYyrdDQExPf66Fq/EiRpZv2EYl2gbl9fxc3s # qoIkyNlL1BCrvmzunkwt4cwvqWremUtqTJ2B53MbBHlf4RfvKz9NVuh5KHdr82AS # MMjU4C8KNTqzgisqQdCy8unTMIIHejCCBWKgAwIBAgIKYQ6Q0gAAAAAAAzANBgkq # hkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x # EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv # bjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5 # IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEwOTA5WjB+MQswCQYDVQQG # EwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwG # A1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYDVQQDEx9NaWNyb3NvZnQg # Q29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC # CgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+laUKq4BjgaBEm6f8MMHt03 # a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc6Whe0t+bU7IKLMOv2akr # rnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4Ddato88tt8zpcoRb0Rrrg # OGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+lD3v++MrWhAfTVYoonpy # 4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nkkDstrjNYxbc+/jLTswM9 # sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6A4aN91/w0FK/jJSHvMAh # dCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmdX4jiJV3TIUs+UsS1Vz8k # A/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL5zmhD+kjSbwYuER8ReTB # w3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zdsGbiwZeBe+3W7UvnSSmn # Eyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3T8HhhUSJxAlMxdSlQy90 # lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS4NaIjAsCAwEAAaOCAe0w # ggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRIbmTlUAXTgqoXNzcitW2o # ynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD # VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBDuRQFTuHqp8cx0SOJNDBa # BgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny # bC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3JsMF4GCCsG # AQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFfMDNfMjIuY3J0MIGfBgNV # HSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEFBQcCARYzaHR0cDovL3d3 # dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1hcnljcHMuaHRtMEAGCCsG # AQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkAYwB5AF8AcwB0AGEAdABl # AG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn8oalmOBUeRou09h0ZyKb # C5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7v0epo/Np22O/IjWll11l # hJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0bpdS1HXeUOeLpZMlEPXh6 # I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/KmtYSWMfCWluWpiW5IP0 # wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvyCInWH8MyGOLwxS3OW560 # STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBpmLJZiWhub6e3dMNABQam # ASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJihsMdYzaXht/a8/jyFqGa # J+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYbBL7fQccOKO7eZS/sl/ah # XJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbSoqKfenoi+kiVH6v7RyOA # 9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sLgOppO6/8MO0ETI7f33Vt # Y5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtXcVZOSEXAQsmbdlsKgEhr # /Xmfwb1tbWrJUnMTDXpQzTGCGX4wghl6AgEBMIGVMH4xCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNp # Z25pbmcgUENBIDIwMTECEzMAAAJRFHbMxYWDbgsAAAAAAlEwDQYJYIZIAWUDBAIB # BQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEO # MAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIIPgLG0l/1hHFjhfpHaA4GFJ # +99Ts1ivPbqKIJQ64ohhMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8A # cwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEB # BQAEggEAsEbOLAprtc0adsZrrOY9X1T/ZW8c1EEqjOjKE41ZzViwdCHUQ8Si+c/0 # r9zxfoA4JqLnNsSKdwy845ggYV9o6ypj7sCaATRJyG0ReqGfw2xWfaOJKwiBnf0N # 3iIsb7gF/F+XaP9r/urB1kKYoIvxZbROg2KrD9Zb3SugeJve4PMgP6MX5CmUjwWB # jxGM/mBoz1MYMtiqTiycMq0ttOh7GUdcBOBqjVa/dA237tCrWX+NsWvoQFDNmFU/ # sXp0nu5v3Ry50gLZ1V46rsFu3LCIVquAUwpC3ds0pJzZwwmoxu6SOmmV9RfsfqlC # BhXO4Odzrb8giJtj+Cy+1lsyjX3m8KGCFwgwghcEBgorBgEEAYI3AwMBMYIW9DCC # FvAGCSqGSIb3DQEHAqCCFuEwghbdAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFUBgsq # hkiG9w0BCRABBKCCAUMEggE/MIIBOwIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFl # AwQCAQUABCDQUpCyqB7Wo7/TXUyX4JA309B3G6IlBROd0mCFrwqS0gIGYoTwtvsf # GBIyMDIyMDYwOTEwNTg1OC40MVowBIACAfSggdSkgdEwgc4xCzAJBgNVBAYTAlVT # MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKTAnBgNVBAsTIE1pY3Jvc29mdCBPcGVy # YXRpb25zIFB1ZXJ0byBSaWNvMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVTTjpGNzdG # LUUzNTYtNUJBRTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2Vydmlj # ZaCCEVwwggcQMIIE+KADAgECAhMzAAABqqUxmwvLsggOAAEAAAGqMA0GCSqGSIb3 # DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAk # BgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTIyMDMwMjE4 # NTEyNloXDTIzMDUxMTE4NTEyNlowgc4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xKTAnBgNVBAsTIE1pY3Jvc29mdCBPcGVyYXRpb25zIFB1ZXJ0 # byBSaWNvMSYwJAYDVQQLEx1UaGFsZXMgVFNTIEVTTjpGNzdGLUUzNTYtNUJBRTEl # MCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZI # hvcNAQEBBQADggIPADCCAgoCggIBAKBP7HK51bWHf+FDSh9O7YyrQtkNMvdHzHia # zvOdI9POGjyJIYrs1WOMmSCp3o/mvsuPnFSP5c0dCeBuUq6u6J30M81ZaNOP/abZ # rTwYrYN+N5nStrOGdCtRBum76hy7Tr3AZDUArLwvhsGlXhLlDU1wioaxM+BVwCNI # 7LmTaYKqjm58hEgsYtKIHk59LzOnI4aenbPLBP/VYYjI6a4KIcun0EZErAukt5PC # /mKUaOphUMGYm0PxfpY9BkG5sPfczFyIfA13LLRS4sGhbUrcM54EvE2FlWBQaJo7 # frKW7CVjITLEX4E2lxwQG/MuZ+1wDYg9OOErT5h+6zecj67eenwxeUoaOEbKtiUx # aJUYnyQKxCWTkNdWRXTKSmIxx0tbsP5irWjqXvT6t/zeJKw05NY8hPT56vW20q0D # YK2NteOCDD0UD6ZNAFLV87GOkl0eBqXcToFVdeJwwOTE6aA4RqYoNr2QUPBIU6JE # iUGBs9c4qC5mBHTY46VaR/odaFDLcxQI4OPkn5al/IPsd8/raDmMfKik66xcNh2q # N4yytYM3uiDenX5qeFdx3pdi43pYAFN/S1/3VRNk+/GRVUUYWYBjDZSqxslidE8h # sxC7K8qLfmNoaQ2aAsu13h1faTMSZIEVxosz1b9yIeXmtM6NlrjV3etwS7JXYwGh # HMdVYEL1AgMBAAGjggE2MIIBMjAdBgNVHQ4EFgQUP5oUvFOHLthfd0Wz3hGtnQVG # pJ4wHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBU # oFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9z # b2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEB # BGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5j # cnQwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDCDANBgkqhkiG9w0B # AQsFAAOCAgEA3wyATZBFEBogrcwHs4zI7qX2y0jbKCI6ZieGAIR96RiMrjZvWG39 # YPA/FL2vhGSCtO7ea3iBlwhhTyJEPexLugT4jB4W0rldOLP5bEc0zwxs9NtTFS8U # l2zbJ7jz5WxSnhSHsfaVFUp7S6B2a1bjKmWIo/Svd3W1V3mcIYzhbpLIUVlP3CbT # JEE+cC3hX+JggnSYRETyo+mI7Hz/KMWFaRWBUYI4g0BrwiV2lYqKyekjNp6rj7b8 # l6OhbgX/JP0bzNxv6io0Y4iNlIzz/PdIh/E2pj3pXPiQJPRlEkMksRecE8VnFyqh # R4fb/F6c5ywY4+mEpshIAg2YUXswFqqbK9Fv+U8YYclYPvhK/wRZs+/5auK4FM+Q # Tjywj0C5rmr8MziqmUGgAuwZQYyHRCopnVdlaO/xxSZCfaZR7w7B3OBEl8j+Voof # s1Kfq9AmmQAWZOjt4DnNk5NnxThPvjQVuOU/y+HTErwqD/wKRCl0AJ3UPTJ8PPYp # +jbEXkKmoFhU4JGer5eaj22nX19pujNZKqqart4yLjNUOkqWjVk4KHpdYRGcJMVX # kKkQAiljUn9cHRwNuPz/Tu7YmfgRXWN4HvCcT2m1QADinOZPsO5v5j/bExw0WmFr # W2CtDEApnClmiAKchFr0xSKE5ET+AyubLapejENr9vt7QXNq6aP1XWcwggdxMIIF # WaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQsw # CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u # ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNy # b3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAx # ODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAy # MDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL # 1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5K # Wv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTeg # Cjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv62 # 6GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SH # JMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss25 # 4o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/Nme # Rd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afo # mXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLi # Mxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb # 0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W2 # 9R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQF # AgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1Ud # DgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdM # g30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp # b3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJ # KwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQF # MAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8w # TTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVj # dHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBK # BggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9N # aWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1V # ffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1 # OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce57 # 32pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihV # J9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZ # UnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW # 9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k # +SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pF # EUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L # +DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1 # ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6 # CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYICzzCCAjgCAQEwgfyhgdSk # gdEwgc4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH # EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKTAnBgNV # BAsTIE1pY3Jvc29mdCBPcGVyYXRpb25zIFB1ZXJ0byBSaWNvMSYwJAYDVQQLEx1U # aGFsZXMgVFNTIEVTTjpGNzdGLUUzNTYtNUJBRTElMCMGA1UEAxMcTWljcm9zb2Z0 # IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUA4G0m0J4eAlljcP/j # vOv9/pm/68aggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAN # BgkqhkiG9w0BAQUFAAIFAOZLxrkwIhgPMjAyMjA2MDkwNTA5MTNaGA8yMDIyMDYx # MDA1MDkxM1owdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA5kvGuQIBADAHAgEAAgIZ # ejAHAgEAAgIRdjAKAgUA5k0YOQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgorBgEE # AYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBBQUAA4GB # AA6dW0PaFOCux9eHpn8iGvAzqWacAjlNR3ln7VZ/+KKinhnYZwVmGmdIvLgQuC/A # UDDuUQE/LGMsehlbyjP6G98ULc6QpWZIdADmB+epu+VohnVMj5l+Ep+pGizDSVgl # 4AXZY799zDDcs/a2NHHryoVLBowMjzx5vVjlgYmxC+x/MYIEDTCCBAkCAQEwgZMw # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAGqpTGbC8uyCA4AAQAA # AaowDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRAB # BDAvBgkqhkiG9w0BCQQxIgQg4ZRurGWDR7dgeh4V6ngno56c+mNp9YA8zSOR9/ix # rDIwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCBWtQJDHFq8EeBz3TXugCqR # hSI/JCZbATYEIwTG8bMewDCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwAhMzAAABqqUxmwvLsggOAAEAAAGqMCIEIDh/hHxPGJyvI4758+C5xdAU # eidgC/vUDSk2Bsy3dKswMA0GCSqGSIb3DQEBCwUABIICAD7q/aHx3OcOG7j0s41q # K/foixRX7WdyZ4Ca89ZEbd+sqAia/puuRAjkhJeqqWXDy+b8WMGuRBndmetLtxvJ # BQUJfzRAgO+CpOyVTan12XuD47EADErgpG9hRP+mTdqFvUriWJPZ2jjdu5kiFWNt # yj7kszuhTgWwvv9hn62jUMJoMzTNuw3cGzbrsgbgZZNltS8V2vEnFR3qPNldYVHN # UzPjpb6uT33rV8wjWmJu5kWc4Oa5WGTicbejBF+tvn1Yig0PwwVQUTtXTFhQ4+EO # mBBHnN5m7jV2tnaTlu/wkUSyLKS5wwEuwUIa804CDsZxTLxnPAtjAbAptrYsIMd5 # saT9SL9Ly/HgMR5DVEMGLIAuy3OM4QBPERNefKd+nuISN3Foq7r74OdFEt16G//O # 8VXm0cXN+c+AOvOhhJZ70L4K+IxFnr7eE2fKCctSvD0d310Qzi2+Pvy+T97OC0ni # neLD8NSHPvEWjWjOAb2Fkjjnio7T4EsytaS7RCaXsm4+aKPWqsrDWypspcPAUfI2 # hyMn6ENZ/iGay3h7AOFa9aDeH+G5qsTSg5dTVECKCdvRDChwIg38rqMlASqOFUOI # olRSPCVvlBV5j/Ad4NeMeO/nQi6hTfqiMpexOUT2/QRLLiLOHDJr7VQCC7jqAPLC # ykSGB6jIHks0qPN7DeTPBdNx # SIG # End signature block |