SQLDB-aadAuthOnly.json

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "serviceHealthAlerts": {
      "value": {
        "resourceGroupName": "pubsec-service-health",
        "incidentTypes": [
          "Incident",
          "Security"
        ],
        "regions": [
          "Global",
          "Canada East",
          "Canada Central"
        ],
        "receivers": {
          "app": [
            "alzcanadapubsec@microsoft.com"
          ],
          "email": [
            "alzcanadapubsec@microsoft.com"
          ],
          "sms": [
            {
              "countryCode": "1",
              "phoneNumber": "5555555555"
            }
          ],
          "voice": [
            {
              "countryCode": "1",
              "phoneNumber": "5555555555"
            }
          ]
        },
        "actionGroupName": "Sub3 ALZ action group",
        "actionGroupShortName": "sub3-alert",
        "alertRuleName": "Sub3 ALZ alert rule",
        "alertRuleDescription": "Alert rule for Azure Landing Zone"
      }
    },
    "securityCenter": {
      "value": {
        "email": "alzcanadapubsec@microsoft.com",
        "phone": "5555555555"
      }
    },
    "subscriptionRoleAssignments": {
      "value": [
        {
          "comments": "Built-in Role: Contributor",
          "roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
          "securityGroupObjectIds": [
            "38f33f7e-a471-4630-8ce9-c6653495a2ee"
          ]
        },
        {
          "comments": "Custom Role: Landing Zone Application Owner",
          "roleDefinitionId": "b4c87314-c1a1-5320-9c43-779585186bcc",
          "securityGroupObjectIds": [
            "38f33f7e-a471-4630-8ce9-c6653495a2ee"
          ]
        }
      ]
    },
    "subscriptionBudget": {
      "value": {
        "createBudget": true,
        "name": "MonthlySubscriptionBudget",
        "amount": 1000,
        "timeGrain": "Monthly",
        "contactEmails": [
          "alzcanadapubsec@microsoft.com"
        ]
      }
    },
    "subscriptionTags": {
      "value": {
        "ISSO": "isso-tag"
      }
    },
    "resourceTags": {
      "value": {
        "ClientOrganization": "client-organization-tag",
        "CostCenter": "cost-center-tag",
        "DataSensitivity": "data-sensitivity-tag",
        "ProjectContact": "project-contact-tag",
        "ProjectName": "project-name-tag",
        "TechnicalContact": "technical-contact-tag"
      }
    },
    "resourceGroups": {
      "value": {
        "automation": "azmlcmk102021W1Automation",
        "compute": "azmlcmk102021W1Compute",
        "monitor": "azmlcmk102021W1Monitor",
        "networking": "azmlcmk102021W1Network",
        "networkWatcher": "NetworkWatcherRG",
        "security": "azmlcmk102021W1Security",
        "storage": "azmlcmk102021W1Storage"
      }
    },
    "useCMK": {
      "value": true
    },
    "automation": {
      "value": {
        "name": "azmlcmk102021W1automation"
      }
    },
    "keyVault": {
      "value": {
        "secretExpiryInDays": 3650
      }
    },
    "aks": {
      "value": {
        "version": "1.21.2",
        "networkPlugin": "kubenet" ,
        "networkPolicy": "calico",
        "podCidr": "11.0.0.0/16",
        "serviceCidr": "20.0.0.0/16" ,
        "dnsServiceIP": "20.0.0.10",
        "dockerBridgeCidr": "30.0.0.1/16"
      }
    },
    "sqldb": {
      "value": {
        "enabled": true,
        "aadAuthenticationOnly": true,
        "aadLoginName": "DBA Group",
        "aadLoginObjectID": "4e4ea47c-ee21-4add-ad2f-a75d0d8014e0",
        "aadLoginType": "Group"
      }
    },
    "sqlmi": {
      "value": {
        "enabled": true,
        "username": "azadmin"
      }
    },
    "aml": {
      "value": {
        "enableHbiWorkspace": false
      }
    },
    "hubNetwork": {
      "value": {
        "virtualNetworkId": "/subscriptions/ed7f4eed-9010-4227-b115-2a5e37728f27/resourceGroups/pubsec-hub-networking-rg/providers/Microsoft.Network/virtualNetworks/hub-vnet",
        "rfc1918IPRange": "10.18.0.0/22",
        "rfc6598IPRange": "100.60.0.0/16",
        "egressVirtualApplianceIp": "10.18.1.4",
        "privateDnsManagedByHub": true,
        "privateDnsManagedByHubSubscriptionId": "ed7f4eed-9010-4227-b115-2a5e37728f27",
        "privateDnsManagedByHubResourceGroupName": "pubsec-dns-rg"
      }
    },
    "network": {
      "value": {
        "peerToHubVirtualNetwork": true,
        "useRemoteGateway": false,
        "name": "azmlcmk102021W1vnet",
        "dnsServers": [
          "10.18.1.4"
        ],
        "addressPrefixes": [
          "10.1.0.0/16"
        ],
        "subnets": {
          "oz": {
            "comments": "Foundational Elements Zone (OZ)",
            "name": "oz",
            "addressPrefix": "10.1.1.0/25"
          },
          "paz": {
            "comments": "Presentation Zone (PAZ)",
            "name": "paz",
            "addressPrefix": "10.1.2.0/25"
          },
          "rz": {
            "comments": "Application Zone (RZ)",
            "name": "rz",
            "addressPrefix": "10.1.3.0/25"
          },
          "hrz": {
            "comments": "Data Zone (HRZ)",
            "name": "hrz",
            "addressPrefix": "10.1.4.0/25"
          },
          "sqlmi": {
            "comments": "SQL Managed Instances Delegated Subnet",
            "name": "sqlmi",
            "addressPrefix": "10.1.5.0/25"
          },
          "databricksPublic": {
            "comments": "Databricks Public Delegated Subnet",
            "name": "databrickspublic",
            "addressPrefix": "10.1.6.0/25"
          },
          "databricksPrivate": {
            "comments": "Databricks Private Delegated Subnet",
            "name": "databricksprivate",
            "addressPrefix": "10.1.7.0/25"
          },
          "privateEndpoints": {
            "comments": "Private Endpoints Subnet",
            "name": "privateendpoints",
            "addressPrefix": "10.1.8.0/25"
          },
          "aks": {
            "comments": "AKS Subnet",
            "name": "aks",
            "addressPrefix": "10.1.9.0/25"
          }
        }
      }
    }
  }
}