Merge pull request #113339 from DCtheGeek/dmc-arm-subbp

Add blueprint def to  sub deployments

Author: ShannonLeavitt

articles/azure-resource-manager/templates/deploy-to-subscription.md

@@ -2,7 +2,7 @@
 title: Deploy resources to subscription
 description: Describes how to create a resource group in an Azure Resource Manager template. It also shows how to deploy resources at the Azure subscription scope.
 ms.topic: conceptual
-ms.date: 03/23/2020
+ms.date: 04/30/2020
 ---
 
 # Create resource groups and resources at the subscription level
@@ -15,6 +15,7 @@ To deploy templates at the subscription level, use Azure CLI, PowerShell, or RES
 
 You can deploy the following resource types at the subscription level:
 
+* [blueprints](/azure/templates/microsoft.blueprint/blueprints)
 * [budgets](/azure/templates/microsoft.consumption/budgets)
 * [deployments](/azure/templates/microsoft.resources/deployments) - for nested templates that deploy to resource groups.
 * [eventSubscriptions](/azure/templates/microsoft.eventgrid/eventsubscriptions)
@@ -239,11 +240,11 @@ The following example creates a resource group, and deploys a storage account to
 }
 ```
 
-## Create policies
+## Azure Policy
 
-### Assign policy
+### Assign policy definition
 
-The following example assigns an existing policy definition to the subscription. If the policy takes parameters, provide them as an object. If the policy doesn't take parameters, use the default empty object.
+The following example assigns an existing policy definition to the subscription. If the policy definition takes parameters, provide them as an object. If the policy definition doesn't take parameters, use the default empty object.
 
 ```json
 {
@@ -280,7 +281,7 @@ The following example assigns an existing policy definition to the subscription.
 To deploy this template with Azure CLI, use:
 
 ```azurecli-interactive
-# Built-in policy that accepts parameters
+# Built-in policy definition that accepts parameters
 definition=$(az policy definition list --query "[?displayName=='Allowed locations'].id" --output tsv)
 
 az deployment sub create \
@@ -307,9 +308,9 @@ New-AzSubscriptionDeployment `
   -policyParameters $policyParams
 ```
 
-### Define and assign policy
+### Create and assign policy definitions
 
-You can [define](../../governance/policy/concepts/definition-structure.md) and assign a policy in the same template.
+You can [define](../../governance/policy/concepts/definition-structure.md) and assign a policy definition in the same template.
 
 ```json
 {
@@ -352,7 +353,7 @@ You can [define](../../governance/policy/concepts/definition-structure.md) and a
 }
 ```
 
-To create the policy definition in your subscription, and apply it to the subscription, use the following CLI command:
+To create the policy definition in your subscription, and assign it to the subscription, use the following CLI command:
 
 ```azurecli
 az deployment sub create \
@@ -370,6 +371,32 @@ New-AzSubscriptionDeployment `
   -TemplateUri "https://raw.githubusercontent.com/Azure/azure-docs-json-samples/master/azure-resource-manager/policydefineandassign.json"
 ```
 
+## Azure Blueprints
+
+### Create blueprint definition
+
+You can [create](../../governance/blueprints/tutorials/create-from-sample.md) a blueprint definition from a template.
+
+:::code language="json" source="~/quickstart-templates/subscription-level-deployments/blueprints-new-blueprint/azuredeploy.json":::
+
+To create the blueprint definition in your subscription, use the following CLI command:
+
+```azurecli
+az deployment sub create \
+  --name demoDeployment \
+  --location centralus \
+  --template-uri "https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/subscription-level-deployments/blueprints-new-blueprint/azuredeploy.json"
+```
+
+To deploy this template with PowerShell, use:
+
+```azurepowershell
+New-AzSubscriptionDeployment `
+  -Name demoDeployment `
+  -Location centralus `
+  -TemplateUri "https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/subscription-level-deployments/blueprints-new-blueprint/azuredeploy.json"
+```
+
 ## Template samples
 
 * [Create a resource group, lock it and give permissions to it](https://github.com/Azure/azure-quickstart-templates/tree/master/subscription-level-deployments/create-rg-lock-role-assignment).

articles/governance/blueprints/breadcrumb/toc.yml

@@ -0,0 +1,11 @@
+- name: Azure
+  tocHref: /azure
+  topicHref: /azure/index
+  items:
+  - name: Governance
+    tocHref: /azure/governance
+    topicHref: /azure/governance
+    items:
+    - name: Blueprints
+      tocHref: /azure/azure-resource-manager
+      topicHref: /azure/governance/blueprints

articles/governance/blueprints/toc.yml

@@ -17,6 +17,9 @@
   - name: Create a blueprint - REST API
     displayName: publish, assign, track, unassign, delete
     href: create-blueprint-rest-api.md
+  - name: Create a blueprint - ARM template
+    displayName: assign, compliance, resource manager
+    href: ../../azure-resource-manager/templates/deploy-to-subscription.md??toc=/azure/governance/blueprints/toc.json&bc=/azure/governance/blueprints/breadcrumb/toc.json
 - name: Tutorials
   items:
   - name: Create from a blueprint sample