Skip to content

Commit 8f9b9cf

Browse files
authored
Merge pull request #96915 from DCtheGeek/dmc-gov-seoimp3
Update Blueprints for SEO improvements
2 parents 5593254 + 3b765d4 commit 8f9b9cf

File tree

17 files changed

+107
-80
lines changed

17 files changed

+107
-80
lines changed

articles/governance/blueprints/concepts/lifecycle.md

Lines changed: 25 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Understand the lifecycle of a blueprint
3-
description: Learn about the lifecycle that a blueprint goes through and details about each stage.
3+
description: Learn about the lifecycle that a blueprint definition goes through and details about each stage, including updating and removing blueprint assignments.
44
ms.date: 07/30/2019
55
ms.topic: conceptual
66
---
@@ -32,25 +32,26 @@ A never published blueprint in **Draft** mode displays a different icon on the *
3232
Definitions** page than ones that have been **Published**. The **Latest Version** is displayed as
3333
**Draft** for these never published blueprints.
3434

35-
Create and edit a blueprint with the [Azure portal](../create-blueprint-portal.md#create-a-blueprint)
36-
or [REST API](../create-blueprint-rest-api.md#create-a-blueprint).
35+
Create and edit a blueprint with the
36+
[Azure portal](../create-blueprint-portal.md#create-a-blueprint) or
37+
[REST API](../create-blueprint-rest-api.md#create-a-blueprint).
3738

3839
## Publishing a blueprint
3940

4041
Once all planned changes have been made to a blueprint in **Draft** mode, it can be **Published**
41-
and made available for assignment. The **Published** version of the blueprint can't be altered.
42-
Once **Published**, the blueprint displays with a different icon than **Draft** blueprints and
43-
displays the provided version number in the **Latest Version** column.
42+
and made available for assignment. The **Published** version of the blueprint can't be altered. Once
43+
**Published**, the blueprint displays with a different icon than **Draft** blueprints and displays
44+
the provided version number in the **Latest Version** column.
4445

4546
Publish a blueprint with the [Azure portal](../create-blueprint-portal.md#publish-a-blueprint) or
4647
[REST API](../create-blueprint-rest-api.md#publish-a-blueprint).
4748

4849
## Creating and editing a new version of the blueprint
4950

50-
A **Published** version of a blueprint can't be altered. However, a new version of the blueprint
51-
can be added to the existing blueprint and modified as needed. Make changes to an existing
52-
blueprint by editing it. When the new changes are saved, the blueprint now has **Unpublished
53-
Changes**. These changes are a new **Draft** version of the blueprint.
51+
A **Published** version of a blueprint can't be altered. However, a new version of the blueprint can
52+
be added to the existing blueprint and modified as needed. Make changes to an existing blueprint by
53+
editing it. When the new changes are saved, the blueprint now has **Unpublished Changes**. These
54+
changes are a new **Draft** version of the blueprint.
5455

5556
Edit a blueprint with the [Azure portal](../create-blueprint-portal.md#edit-a-blueprint).
5657

@@ -62,7 +63,8 @@ Blueprint** button is available on the edit blueprint page. If the button isn't
6263
blueprint has already been **Published** and has no **Unpublished Changes**.
6364

6465
> [!NOTE]
65-
> A single blueprint can have multiple **Published** versions that can each be assigned to subscriptions.
66+
> A single blueprint can have multiple **Published** versions that can each be assigned to
67+
> subscriptions.
6668
6769
To publish a blueprint with **Unpublished Changes**, use the same steps for publishing a new
6870
blueprint.
@@ -74,27 +76,28 @@ version of a blueprint can also be deleted. Deleting a version of a blueprint do
7476
impact on other versions of that blueprint.
7577

7678
> [!NOTE]
77-
> It's not possible to delete a blueprint that has active assignments. Delete the
78-
> assignments first and then delete the version you wish to remove.
79+
> It's not possible to delete a blueprint that has active assignments. Delete the assignments first
80+
> and then delete the version you wish to remove.
7981
8082
1. Select **All services** in the left pane. Search for and select **Blueprints**.
8183

82-
1. Select **Blueprint definitions** from the page on the left and use the filter options to locate the blueprint you want to delete a version of. Click on it to open the edit page.
84+
1. Select **Blueprint definitions** from the page on the left and use the filter options to locate
85+
the blueprint you want to delete a version of. Select it to open the edit page.
8386

84-
1. Click the **Published versions** tab and locate the version you wish to delete.
87+
1. Select the **Published versions** tab and locate the version you wish to delete.
8588

8689
1. Right-click on the version to delete and select **Delete this version**.
8790

8891
## Deleting the blueprint
8992

9093
The core blueprint can also be deleted. Deleting the core blueprint also deletes any blueprint
9194
versions of that blueprint, including both **Draft** and **Published** blueprints. As with deleting
92-
a version of a blueprint, deleting the core blueprint doesn't remove the existing assignments of
93-
any of the blueprint versions.
95+
a version of a blueprint, deleting the core blueprint doesn't remove the existing assignments of any
96+
of the blueprint versions.
9497

9598
> [!NOTE]
96-
> It's not possible to delete a blueprint that has active assignments. Delete the
97-
> assignments first and then delete the version you wish to remove.
99+
> It's not possible to delete a blueprint that has active assignments. Delete the assignments first
100+
> and then delete the version you wish to remove.
98101
99102
Delete a blueprint with the [Azure portal](../create-blueprint-portal.md#delete-a-blueprint) or
100103
[REST API](../create-blueprint-rest-api.md#delete-a-blueprint).
@@ -106,9 +109,9 @@ mode of a version of the blueprint is **Published**, then that version can be as
106109
subscription. This lifecycle enables versions of a blueprint to be used and actively assigned while
107110
a newer version is being developed.
108111

109-
As versions of blueprints are assigned, it's important to understand where they're assigned and
110-
with what parameters they've been assigned with. The parameters can either be static or dynamic. To
111-
learn more, see [static and dynamic parameters](parameters.md).
112+
As versions of blueprints are assigned, it's important to understand where they're assigned and with
113+
what parameters they've been assigned with. The parameters can either be static or dynamic. To learn
114+
more, see [static and dynamic parameters](parameters.md).
112115

113116
### Updating assignments
114117

articles/governance/blueprints/concepts/resource-locking.md

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
---
22
title: Understand resource locking
3-
description: Learn about the locking options to protect resources when assigning a blueprint.
3+
description: Learn about the locking options in Azure Blueprints to protect resources when assigning a blueprint.
44
ms.date: 04/24/2019
55
ms.topic: conceptual
66
---
77
# Understand resource locking in Azure Blueprints
88

99
The creation of consistent environments at scale is only truly valuable if there's a mechanism to
1010
maintain that consistency. This article explains how resource locking works in Azure Blueprints. To
11-
see an example of resource locking and application of _deny assignments_, see the [protecting new resources](../tutorials/protect-new-resources.md)
12-
tutorial.
11+
see an example of resource locking and application of _deny assignments_, see the
12+
[protecting new resources](../tutorials/protect-new-resources.md) tutorial.
1313

1414
## Locking modes and states
1515

@@ -55,8 +55,8 @@ is left behind and would need to be deleted through normal means.
5555
## How blueprint locks work
5656

5757
An RBAC [deny assignments](../../../role-based-access-control/deny-assignments.md) deny action is
58-
applied to artifact resources during assignment of a blueprint if the assignment selected the
59-
**Read Only** or **Do Not Delete** option. The deny action is added by the managed identity of the
58+
applied to artifact resources during assignment of a blueprint if the assignment selected the **Read
59+
Only** or **Do Not Delete** option. The deny action is added by the managed identity of the
6060
blueprint assignment and can only be removed from the artifact resources by the same managed
6161
identity. This security measure enforces the locking mechanism and prevents removing the blueprint
6262
lock outside Blueprints.
@@ -80,10 +80,12 @@ of each mode are as follows:
8080
8181
## Exclude a principal from a deny assignment
8282

83-
In some design or security scenarios, it may be necessary to exclude a principal from the [deny assignment](../../../role-based-access-control/deny-assignments.md)
84-
the blueprint assignment creates. This is done in REST API by adding up to five values to the
85-
**excludedPrincipals** array in the **locks** property when [creating the assignment](/rest/api/blueprints/assignments/createorupdate).
86-
This is an example of a request body that includes **excludedPrincipals**:
83+
In some design or security scenarios, it may be necessary to exclude a principal from the
84+
[deny assignment](../../../role-based-access-control/deny-assignments.md) the blueprint assignment
85+
creates. This is done in REST API by adding up to five values to the **excludedPrincipals** array in
86+
the **locks** property when
87+
[creating the assignment](/rest/api/blueprints/assignments/createorupdate). This is an example of a
88+
request body that includes **excludedPrincipals**:
8789

8890
```json
8991
{

articles/governance/blueprints/how-to/configure-for-blueprint-operator.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Configure your environment for a Blueprint Operator
2+
title: Setup your environment for Blueprint Operator
33
description: Learn how to configure your Azure environment for use with the Blueprint Operator built-in role-based access control (RBAC) role.
44
ms.date: 08/26/2019
55
ms.topic: conceptual

articles/governance/blueprints/how-to/import-export-ps.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Import and export blueprint definitions with PowerShell
2+
title: Import and export blueprints with PowerShell
33
description: Learn how to work with your blueprint definitions as code. Share, source control, and manage them using the export and import commands.
44
ms.date: 09/03/2019
55
ms.topic: conceptual

articles/governance/blueprints/how-to/update-existing-assignments.md

Lines changed: 21 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Update an existing assignment from the portal
3-
description: Learn about the mechanism for updating an existing assignment from the portal in Azure Blueprints.
4-
ms.date: 10/25/2018
3+
description: Learn about the mechanism for updating an existing blueprint assignment from the portal in Azure Blueprints.
4+
ms.date: 11/21/2019
55
ms.topic: conceptual
66
---
77
# How to update an existing blueprint assignment
@@ -19,17 +19,23 @@ an existing assignment, including:
1919

2020
1. Select **Assigned blueprints** from the page on the left.
2121

22-
1. In the list of blueprints, left-click the blueprint assignment. Then click the **Update assignment** button OR right-click the blueprint assignment and select **Update assignment**.
22+
1. In the list of blueprints, left-click the blueprint assignment. Then click the **Update
23+
assignment** button OR right-click the blueprint assignment and select **Update assignment**.
2324

2425
![Update an existing blueprint assignment](../media/update-existing-assignments/update-assignment.png)
2526

26-
1. The **Assign blueprint** page will load pre-filled with all values from the original assignment. You can change the **blueprint definition version**, the **Lock Assignment** state, and any of the dynamic parameters that exist on the blueprint definition. Click **Assign** when done making changes.
27+
1. The **Assign blueprint** page will load pre-filled with all values from the original assignment.
28+
You can change the **blueprint definition version**, the **Lock Assignment** state, and any of
29+
the dynamic parameters that exist on the blueprint definition. Click **Assign** when done making
30+
changes.
2731

28-
1. On the updated assignment details page, see the new status. In this example, we added **Locking** to the assignment.
32+
1. On the updated assignment details page, see the new status. In this example, we added **Locking**
33+
to the assignment.
2934

3035
![Updated an existing blueprint assignment - lock mode changed](../media/update-existing-assignments/updated-assignment.png)
3136

32-
1. Explore details about other **Assignment operations** using the drop-down. The table of **Managed resources** updates by selected assignment operation.
37+
1. Explore details about other **Assignment operations** using the drop-down. The table of **Managed
38+
resources** updates by selected assignment operation.
3339

3440
![Assignment operations of a blueprint assignment](../media/update-existing-assignments/assignment-operations.png)
3541

@@ -40,13 +46,18 @@ happens to already deployed resources. The requested change and the type of arti
4046
deployed or updated determine which actions are taken.
4147

4248
- Role Assignments
43-
- If the role or the role assignee (user, group, or app) changes, a new role assignment is created. Role assignments previously deployed are left in place.
49+
- If the role or the role assignee (user, group, or app) changes, a new role assignment is
50+
created. Role assignments previously deployed are left in place.
4451
- Policy Assignments
4552
- If the parameters of the policy assignment are changed, the existing assignment is updated.
46-
- If the definition of the policy assignment is changed, a new policy assignment is created. Policy assignments previously deployed are left in place.
47-
- If the policy assignment artifact is removed from the blueprint, deployed policy assignments are left in place.
53+
- If the definition of the policy assignment is changed, a new policy assignment is created.
54+
Policy assignments previously deployed are left in place.
55+
- If the policy assignment artifact is removed from the blueprint, deployed policy assignments are
56+
left in place.
4857
- Azure Resource Manager templates
49-
- The template is processed through Resource Manager as a **PUT**. As each resource type handles this action differently, review the documentation for each included resource to determine the impact of this action when run by Blueprints.
58+
- The template is processed through Resource Manager as a **PUT**. As each resource type handles
59+
this action differently, review the documentation for each included resource to determine the
60+
impact of this action when run by Blueprints.
5061

5162
## Possible errors on updating assignments
5263

articles/governance/blueprints/samples/caf-foundation/index.md

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: CAF Foundation blueprint sample - Overview
3-
description: Overview and architecture of the CAF Foundation blueprint sample.
3+
description: Overview and architecture of the Cloud Adoption Framework (CAF) for Azure Foundation blueprint sample.
44
ms.date: 08/20/2019
55
ms.topic: sample
66
---
@@ -22,26 +22,27 @@ organization to confidently get started with Azure.
2222
This implementation incorporates several Azure services used to provide a secure, fully monitored,
2323
enterprise-ready foundation. This environment is composed of:
2424

25-
- An [Azure Key Vault](../../../../key-vault/key-vault-overview.md) instance used to host secrets used
26-
for the VMs deployed in the shared services environment
25+
- An [Azure Key Vault](../../../../key-vault/key-vault-overview.md) instance used to host secrets
26+
used for the VMs deployed in the shared services environment
2727
- Deploy [Log Analytics](../../../../azure-monitor/overview.md) is deployed to ensure all actions
28-
and services log to a central location from the moment you start your secure deployment in to [Storage Accounts](../../../../storage/common/storage-introduction.md)
29-
for diagnostic logging
28+
and services log to a central location from the moment you start your secure deployment in to
29+
[Storage Accounts](../../../../storage/common/storage-introduction.md) for diagnostic logging
3030
- Deploy [Azure Security Center](../../../../security-center/security-center-intro.md) (standard
3131
version) provides threat protection for your migrated workloads
3232
- The blueprint also defines and deploys [Azure Policies](../../../policy/overview.md), for
3333
- Tagging (CostCenter) applied to resources groups
3434
- Append resources in resource group with the CostCenter Tag
3535
- Allowed Azure Region for Resources and Resource Groups
3636
- Allowed Storage Account SKUs (choose while deploying)
37-
- Allowed Azure VM SKUs (choose while deploying)
37+
- Allowed Azure VM SKUs (choose while deploying)
3838
- Require Network Watch to be deployed
3939
- Require Azure Storage Account Secure transfer Encryption
4040
- Deny resource types (choose while deploying)
4141
- Initiatives
4242
- Enable Monitoring in Azure Security Center (89 Policies)
4343

44-
All these elements abide to the proven practices published in the [Azure Architecture Center - Reference Architectures](/azure/architecture/reference-architectures/).
44+
All these elements abide to the proven practices published in the
45+
[Azure Architecture Center - Reference Architectures](/azure/architecture/reference-architectures/).
4546

4647
> [!NOTE]
4748
> The CAF Foundation lays out a foundational architecture for workloads.
@@ -55,7 +56,7 @@ For more information, see the
5556
You've reviewed the overview and architecture of the CAF Foundation blueprint sample.
5657

5758
> [!div class="nextstepaction"]
58-
> [CAF Foundation blueprint - Deploy steps](./deploy.md)
59+
> [CAF Foundation blueprint - Deploy steps](./deploy.md)
5960
6061
Additional articles about blueprints and how to use them:
6162

articles/governance/blueprints/samples/caf-migrate-landing-zone/index.md

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: CAF Migration landing zone blueprint sample - Overview
3-
description: Overview and architecture of the CAF Migration landing zone blueprint sample.
3+
description: Overview and architecture of the Cloud Adoption Framework (CAF) for Azure Migration landing zone blueprint sample.
44
ms.date: 08/20/2019
55
ms.topic: sample
66
---
@@ -25,8 +25,8 @@ confidently get started with Azure.
2525
This environment is composed of several Azure services used to provide a secure, fully monitored,
2626
enterprise-ready governance. This environment is composed of:
2727

28-
- An [Azure Key Vault](../../../../key-vault/key-vault-overview.md) instance used to host secrets used
29-
for the Certificates, Keys, and Secrets deployed in the shared services environment
28+
- An [Azure Key Vault](../../../../key-vault/key-vault-overview.md) instance used to host secrets
29+
used for the Certificates, Keys, and Secrets deployed in the shared services environment
3030
- Deploy [Log Analytics](../../../../azure-monitor/overview.md) is deployed to ensure all actions
3131
and services log to a central location from the moment you start your migration
3232
- Deploy [Azure Security Center](../../../../security-center/security-center-intro.md) (standard
@@ -38,21 +38,23 @@ enterprise-ready governance. This environment is composed of:
3838
and Database migration.
3939

4040

41-
All these elements abide to the proven practices published in the [Azure Architecture Center - Reference Architectures](/azure/architecture/reference-architectures/).
41+
All these elements abide to the proven practices published in the
42+
[Azure Architecture Center - Reference Architectures](/azure/architecture/reference-architectures/).
4243

4344
> [!NOTE]
4445
> The CAF Migration blueprint lays out a landing zone for your workloads. You still need to perform
4546
> the assessment and migration of your Virtual Machines / Databases on top of this foundational
4647
> architecture.
4748
48-
For more information, see the [Microsoft Cloud Adoption Framework for Azure - Migrate](/azure/architecture/cloud-adoption/migrate/).
49+
For more information, see the
50+
[Microsoft Cloud Adoption Framework for Azure - Migrate](/azure/architecture/cloud-adoption/migrate/).
4951

5052
## Next steps
5153

5254
You've reviewed the overview and architecture of the CAF Migrate landing zone blueprint sample.
5355

5456
> [!div class="nextstepaction"]
55-
> [CAF Migration landing zone blueprint - Deploy steps](./deploy.md)
57+
> [CAF Migration landing zone blueprint - Deploy steps](./deploy.md)
5658
5759
Additional articles about blueprints and how to use them:
5860

articles/governance/blueprints/samples/canada-federal-pbmm/deploy.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Canada Federal PBMM blueprint sample - Deploy steps
33
description: Deploy steps for the Canada Federal PBMM blueprint sample including blueprint artifact parameter details.
44
ms.date: 09/05/2019
5-
ms.topic: conceptual
5+
ms.topic: sample
66
---
77
# Deploy the Canada Federal PBMM blueprint samples
88

articles/governance/blueprints/samples/canada-federal-pbmm/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,4 +35,4 @@ Additional articles about blueprints and how to use them:
3535
- Understand how to use [static and dynamic parameters](../../concepts/parameters.md).
3636
- Learn to customize the [blueprint sequencing order](../../concepts/sequencing-order.md).
3737
- Find out how to make use of [blueprint resource locking](../../concepts/resource-locking.md).
38-
- Learn how to [update existing assignments](../../how-to/update-existing-assignments.md).
38+
- Learn how to [update existing assignments](../../how-to/update-existing-assignments.md).

0 commit comments

Comments
 (0)