Skip to content

Commit 37e9282

Browse files
committed
Freshness reviews
1 parent 98b418b commit 37e9282

File tree

9 files changed

+59
-48
lines changed

9 files changed

+59
-48
lines changed

articles/governance/blueprints/concepts/deployment-stages.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Stages of a blueprint deployment
33
description: Learn the security and artifact related steps the Azure Blueprints services goes through while creating a blueprint assignment.
4-
ms.date: 11/13/2019
4+
ms.date: 05/06/2020
55
ms.topic: conceptual
66
---
77
# Stages of a blueprint deployment
@@ -32,8 +32,8 @@ Blueprints service principal doesn't get and doesn't need owner rights on the su
3232

3333
The rights are granted automatically if the assignment is done through the portal. However, if the
3434
assignment is done through the REST API, granting the rights needs to be done with a separate API
35-
call. The Azure Blueprints AppId is `f71766dc-90d9-4b7d-bd9d-4499c4331c3f`, but the service principal
36-
varies by tenant. Use
35+
call. The Azure Blueprints AppId is `f71766dc-90d9-4b7d-bd9d-4499c4331c3f`, but the service
36+
principal varies by tenant. Use
3737
[Azure Active Directory Graph API](../../../active-directory/develop/active-directory-graph-api.md)
3838
and REST endpoint [servicePrincipals](/graph/api/resources/serviceprincipal) to get the service
3939
principal. Then, grant the Azure Blueprints the _Owner_ role through the

articles/governance/blueprints/concepts/lifecycle.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Understand the lifecycle of a blueprint
33
description: Learn about the lifecycle that a blueprint definition goes through and details about each stage, including updating and removing blueprint assignments.
4-
ms.date: 07/30/2019
4+
ms.date: 05/06/2020
55
ms.topic: conceptual
66
---
77
# Understand the lifecycle of an Azure Blueprint

articles/governance/blueprints/concepts/sequencing-order.md

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Understand the deployment sequence order
33
description: Learn about the default order that blueprint artifacts are deployed in during a blueprint assignment and how to customize the deployment order.
4-
ms.date: 08/22/2019
4+
ms.date: 05/06/2020
55
ms.topic: conceptual
66
---
77
# Understand the deployment sequence in Azure Blueprints
@@ -50,9 +50,10 @@ definition, for resource groups, and artifact objects support this property. `de
5050
array of artifact names that the particular artifact needs to be created before it's created.
5151

5252
> [!NOTE]
53-
> When creating blueprint objects, each artifact resource gets its name from the filename, if using [PowerShell](/powershell/module/az.blueprint/new-azblueprintartifact),
54-
> or the URL endpoint, if using [REST API](/rest/api/blueprints/artifacts/createorupdate).
55-
> _resourceGroup_ references in artifacts must match those defined in the blueprint definition.
53+
> When creating blueprint objects, each artifact resource gets its name from the filename, if using
54+
> [PowerShell](/powershell/module/az.blueprint/new-azblueprintartifact), or the URL endpoint, if
55+
> using [REST API](/rest/api/blueprints/artifacts/createorupdate). _resourceGroup_ references in
56+
> artifacts must match those defined in the blueprint definition.
5657
5758
### Example - ordered resource group
5859

@@ -151,11 +152,11 @@ During the creation process, a topological sort is used to create the dependency
151152
blueprints artifacts. The check makes sure each level of dependency between resource groups and
152153
artifacts is supported.
153154

154-
If an artifact dependency is declared that wouldn't alter the default order, then no change is
155-
made. An example is a resource group that depends on a subscription level policy. Another example
156-
is a resource group 'standard-rg' child policy assignment that depends on resource group
157-
'standard-rg' child role assignment. In both cases, the `dependsOn` wouldn't have altered the
158-
default sequencing order and no changes would be made.
155+
If an artifact dependency is declared that wouldn't alter the default order, then no change is made.
156+
An example is a resource group that depends on a subscription level policy. Another example is a
157+
resource group 'standard-rg' child policy assignment that depends on resource group 'standard-rg'
158+
child role assignment. In both cases, the `dependsOn` wouldn't have altered the default sequencing
159+
order and no changes would be made.
159160

160161
## Next steps
161162

articles/governance/blueprints/create-blueprint-powershell.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Quickstart: Create a blueprint with PowerShell"
33
description: In this quickstart, you use Azure Blueprints to create, define, and deploy artifacts using the PowerShell.
4-
ms.date: 11/21/2019
4+
ms.date: 05/06/2020
55
ms.topic: quickstart
66
---
77
# Quickstart: Define and Assign an Azure Blueprint with PowerShell
@@ -33,7 +33,7 @@ a role assignment on the resource group.
3333
> When using PowerShell, the _blueprint_ object is created first. For each _artifact_ to be added
3434
> that has parameters, the parameters need to be defined in advance on the initial _blueprint_.
3535
36-
1. Create the initial _blueprint_ object. The **BlueprintFile** parameter takes a JSON file which
36+
1. Create the initial _blueprint_ object. The **BlueprintFile** parameter takes a JSON file that
3737
includes properties about the blueprint, any resource groups to create, and all of the blueprint
3838
level parameters. The parameters are set during assignment and used by the artifacts added in
3939
later steps.
@@ -348,7 +348,8 @@ lock, and blueprint parameters, use the matching PowerShell parameters on the
348348

349349
1. Run the blueprint deployment by assigning it to a subscription. As the **contributors** and
350350
**owners** parameters require an array of objectIds of the principals to be granted the role
351-
assignment, use [Azure Active Directory Graph API](../../active-directory/develop/active-directory-graph-api.md)
351+
assignment, use
352+
[Azure Active Directory Graph API](../../active-directory/develop/active-directory-graph-api.md)
352353
for gathering the objectIds for use in the **AssignmentFile** for your own users, groups, or
353354
service principals.
354355

articles/governance/blueprints/how-to/configure-for-blueprint-operator.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
2-
title: Setup your environment for Blueprint Operator
2+
title: Set up your environment for Blueprint Operator
33
description: Learn how to configure your Azure environment for use with the Blueprint Operator built-in role-based access control (RBAC) role.
4-
ms.date: 08/26/2019
4+
ms.date: 05/06/2020
55
ms.topic: how-to
66
---
77
# Configure your environment for a Blueprint Operator
@@ -45,8 +45,9 @@ of permissions.
4545
of **Managed Identity Operator** to the account or security group. Scope the role assignment to
4646
the new user-assigned managed identity.
4747

48-
1. As the **Blueprint Operator**, [assign a blueprint](../create-blueprint-portal.md#assign-a-blueprint)
49-
that uses the new user-assigned managed identity.
48+
1. As the **Blueprint Operator**,
49+
[assign a blueprint](../create-blueprint-portal.md#assign-a-blueprint) that uses the new
50+
user-assigned managed identity.
5051

5152
## Next steps
5253

articles/governance/blueprints/how-to/import-export-ps.md

Lines changed: 13 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Import and export blueprints with PowerShell
33
description: Learn how to work with your blueprint definitions as code. Share, source control, and manage them using the export and import commands.
4-
ms.date: 09/03/2019
4+
ms.date: 05/06/2020
55
ms.topic: how-to
66
---
77
# Import and export blueprint definitions with PowerShell
@@ -28,12 +28,14 @@ This article assumes a moderate working knowledge of Azure Blueprints. If you ha
2828
work through the following articles:
2929

3030
- [Create a blueprint in the portal](../create-blueprint-portal.md)
31-
- Read about [deployment stages](../concepts/deployment-stages.md) and [the blueprint lifecycle](../concepts/lifecycle.md)
32-
- [Creating](../create-blueprint-powershell.md) and [managing](./manage-assignments-ps.md)
33-
blueprint definitions and assignments with PowerShell
31+
- Read about [deployment stages](../concepts/deployment-stages.md) and
32+
[the blueprint lifecycle](../concepts/lifecycle.md)
33+
- [Creating](../create-blueprint-powershell.md) and [managing](./manage-assignments-ps.md) blueprint
34+
definitions and assignments with PowerShell
3435

35-
If it isn't already installed, follow the instructions in [Add the Az.Blueprint module](./manage-assignments-ps.md#add-the-azblueprint-module)
36-
to install and validate the **Az.Blueprint** module from the PowerShell Gallery.
36+
If it isn't already installed, follow the instructions in
37+
[Add the Az.Blueprint module](./manage-assignments-ps.md#add-the-azblueprint-module) to install and
38+
validate the **Az.Blueprint** module from the PowerShell Gallery.
3739

3840
## Folder structure of a blueprint definition
3941

@@ -96,8 +98,9 @@ definition can be useful for sharing, backup, or placing into source control.
9698
## Import your blueprint definition
9799

98100
Once you have either an [exported blueprint definition](#export-your-blueprint-definition) or have a
99-
manually created blueprint definition in the [required folder structure](#folder-structure-of-a-blueprint-definition),
100-
you can import that blueprint definition to a different management group or subscription.
101+
manually created blueprint definition in the
102+
[required folder structure](#folder-structure-of-a-blueprint-definition), you can import that
103+
blueprint definition to a different management group or subscription.
101104

102105
For examples of built-in blueprint definitions, see the
103106
[Azure Blueprint GitHub repo](https://github.com/Azure/azure-blueprints/tree/master/samples/001-builtins).
@@ -122,7 +125,8 @@ For examples of built-in blueprint definitions, see the
122125
Import-AzBlueprintWithArtifact -Name 'MyBlueprint' -ManagementGroupId 'DevMG' -InputPath 'C:\Blueprints\MyBlueprint'
123126
```
124127

125-
Once the blueprint definition is imported, [assign it with PowerShell](./manage-assignments-ps.md#create-blueprint-assignments).
128+
Once the blueprint definition is imported,
129+
[assign it with PowerShell](./manage-assignments-ps.md#create-blueprint-assignments).
126130

127131
For information about creating advanced blueprint definitions, see the following articles:
128132

articles/governance/blueprints/how-to/manage-assignments-ps.md

Lines changed: 14 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: How to manage assignments with PowerShell
33
description: Learn how to manage blueprint assignments with the official Azure Blueprints PowerShell module, Az.Blueprint.
4-
ms.date: 09/30/2019
4+
ms.date: 05/06/2020
55
ms.topic: how-to
66
---
77
# How to manage assignments with PowerShell
@@ -20,8 +20,10 @@ with the [Azure PowerShell Docker image](https://hub.docker.com/r/azuresdk/azure
2020

2121
The Azure Blueprints module requires the following software:
2222

23-
- Azure PowerShell 1.5.0 or higher. If it isn't yet installed, follow [these instructions](/powershell/azure/install-az-ps).
24-
- PowerShellGet 2.0.1 or higher. If it isn't installed or updated, follow [these instructions](/powershell/scripting/gallery/installing-psget).
23+
- Azure PowerShell 1.5.0 or higher. If it isn't yet installed, follow
24+
[these instructions](/powershell/azure/install-az-ps).
25+
- PowerShellGet 2.0.1 or higher. If it isn't installed or updated, follow
26+
[these instructions](/powershell/scripting/gallery/installing-psget).
2527

2628
### Install the module
2729

@@ -228,11 +230,12 @@ ResourceGroups : ResourceGroup
228230

229231
### Example 2: Use a JSON assignment definition file
230232

231-
The following example creates nearly the same assignment as [Example 1](#example-1-provide-parameters).
232-
Instead of passing parameters to the cmdlet, the example shows use of a JSON assignment definition
233-
file and the **AssignmentFile** parameter. Additionally, the **excludedPrincipals** property is
234-
configured as part of **locks**. There isn't a PowerShell parameter for **excludedPrincipals** and
235-
the property can only be configured by setting it through the JSON assignment definition file.
233+
The following example creates nearly the same assignment as
234+
[Example 1](#example-1-provide-parameters). Instead of passing parameters to the cmdlet, the example
235+
shows use of a JSON assignment definition file and the **AssignmentFile** parameter. Additionally,
236+
the **excludedPrincipals** property is configured as part of **locks**. There isn't a PowerShell
237+
parameter for **excludedPrincipals** and the property can only be configured by setting it through
238+
the JSON assignment definition file.
236239

237240
```json
238241
{
@@ -286,7 +289,8 @@ that the `New-AzBlueprintAssignment` cmdlet does, allowing anything that was set
286289
to be updated. The exceptions are the _Name_, _Blueprint_, and _SubscriptionId_. Only the values
287290
provided are updated.
288291

289-
To understand what happens when updating a blueprint assignment, see [rules for updating assignments](./update-existing-assignments.md#rules-for-updating-assignments).
292+
To understand what happens when updating a blueprint assignment, see
293+
[rules for updating assignments](./update-existing-assignments.md#rules-for-updating-assignments).
290294

291295
- **Name** [required]
292296
- Specifies the name of the blueprint assignment to update
@@ -381,7 +385,7 @@ $blueprintAssignment = Get-AzBlueprintAssignment -Name 'Assignment-lock-resource
381385
Remove-AzBlueprintAssignment -InputObject $blueprintAssignment -SubscriptionId '{subId}'
382386
```
383387

384-
## End-to-end code example
388+
## Code example
385389

386390
Bringing all the steps together, the following example gets the blueprint definition, then creates,
387391
updates, and removes a blueprint assignment in the specific subscription represented as `{subId}`:

articles/governance/blueprints/overview.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Overview of Azure Blueprints
33
description: Understand how the Azure Blueprints service enables you to create, define, and deploy artifacts in your Azure environment.
4-
ms.date: 11/21/2019
4+
ms.date: 05/06/2020
55
ms.topic: overview
66
---
77
# What is Azure Blueprints?
@@ -11,7 +11,7 @@ Azure Blueprints enables cloud architects and central information technology gro
1111
repeatable set of Azure resources that implements and adheres to an organization's standards,
1212
patterns, and requirements. Azure Blueprints makes it possible for development teams to rapidly
1313
build and stand up new environments with trust they're building within organizational compliance
14-
with a set of built-in components -- such as networking -- to speed up development and delivery.
14+
with a set of built-in components, such as networking, to speed up development and delivery.
1515

1616
Blueprints are a declarative way to orchestrate the deployment of various resource templates and
1717
other artifacts such as:
@@ -21,18 +21,18 @@ other artifacts such as:
2121
- Azure Resource Manager templates
2222
- Resource Groups
2323

24-
The Azure Blueprints service is backed by the globally distributed [Azure Cosmos DB](../../cosmos-db/introduction.md).
25-
Blueprint objects are replicated to multiple Azure regions. This replication provides low latency,
26-
high availability, and consistent access to your blueprint objects, regardless of which region
27-
Azure Blueprints deploys your resources to.
24+
The Azure Blueprints service is backed by the globally distributed
25+
[Azure Cosmos DB](../../cosmos-db/introduction.md). Blueprint objects are replicated to multiple
26+
Azure regions. This replication provides low latency, high availability, and consistent access to
27+
your blueprint objects, regardless of which region Azure Blueprints deploys your resources to.
2828

2929
## How it's different from Resource Manager templates
3030

3131
The service is designed to help with _environment setup_. This setup often consists of a set of
3232
resource groups, policies, role assignments, and Resource Manager template deployments. A blueprint
3333
is a package to bring each of these _artifact_ types together and allow you to compose and version
34-
that package -- including through a CI/CD pipeline. Ultimately, each is assigned to a subscription
35-
in a single operation that can be audited and tracked.
34+
that package, including through a CI/CD pipeline. Ultimately, each is assigned to a subscription in
35+
a single operation that can be audited and tracked.
3636

3737
Nearly everything that you want to include for deployment in Azure Blueprints can be accomplished
3838
with a Resource Manager template. However, a Resource Manager template is a document that doesn't

articles/governance/blueprints/tutorials/protect-new-resources.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Tutorial: Protect new resources with locks"
33
description: In this tutorial, you use the Azure Blueprints resource locks options Read Only and Do Not Delete to protect newly deployed resources.
4-
ms.date: 11/21/2019
4+
ms.date: 05/06/2020
55
ms.topic: tutorial
66
---
77
# Tutorial: Protect new resources with Azure Blueprints resource locks

0 commit comments

Comments
 (0)