main.parameters.jsonc

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        // max length: 10. Suffix that will be used to name the resources in a pattern like <resourceAbbreviation>-<workloadName>
        "workloadName": {
            "value": "merge-ase"
            // "value": "merge-mul"
        },
        //Required. The name of the environmentName (e.g. "dev", "test", "prod", "preprod", "staging", "uat", "dr", "qa"). Up to 8 characters long.
        "environmentName": {
            "value": "dev"
        },
        //Optional, default is false. Set to true if you want to deploy ASE v3 instead of Multitenant App Service Plan.
        "deployAseV3": {
            "value": false
        },
        //If empty, then a new hub will be deployed. If given, no new hub will be created and we create the peering between spoke and and existing hub vnet
        "vnetHubResourceId": {
            "value": ""
        },
        //If vnetHubResourceId empty, this value is irrelevant. If vnetHubResourceId has value and we need UDR, then the internal IP of the azFW needs to be set. Otherwise no UDR will be created
        "firewallInternalIp": {
            "value": "10.242.0.4"
        },
        "vnetHubAddressSpace": {
            "value": "10.242.0.0/20"
        },
        // Feature Flags
        // set to true if you want to intercept all outbound traffic with azure firewall
        "enableEgressLockdown": {
            "value": true
        },
        // set to true if you want to a redis cache
        "deployRedis": {
            "value": false
        },
        // set to true if you want to deploy a azure SQL server and default database
        "deployAzureSql": {
            "value": false
        },
        // set to true if you want to deploy application configuration
        "deployAppConfig": {
            "value": false
        },
        // set to true if you want to deploy a jumpbox/devops VM
        "deployJumpHost": {
            "value": false
        },
        // Deploy (or not) an Azure OpenAI account. ATTENTION: At the time of writing , OpenAI is in preview and only available in limited regions: look here: https://learn.microsoft.com/azure/ai-services/openai/chatgpt-quickstart#prerequisites
        "deployOpenAi": {
            "value": false
        },
        // set to true if you want to auto approve the Private Endpoint of the AFD Premium
        "autoApproveAfdPrivateEndpoint": {
            "value": false
        },
        // CIDR of the subnet that will host the azure Firewall
        "subnetHubFirewallAddressSpace": {
            "value": "10.242.0.0/26"    // "10.242.0.0/26"
        },
        // CIDR to use for the AzureFirewallManagementSubnet, which is required by AzFW Basic
        "subnetHubFirewallManagementAddressSpace": {
            "value": "10.242.0.64/26" // 
        },
        // CIDR of the subnet that will host the Bastion Service
        "subnetHubBastionAddressSpace": {
            "value": "10.242.0.128/26"  // "10.242.0.64/26"
        },
        //CIDR of the spoke vnet that will hold the app services plan and the rest supporting services (and their private endpoints)
        "vnetSpokeAddressSpace": {
            "value": "10.240.0.0/20"
        },
        //CIDR of the subnet that will hold the app services plan. ATTENTION: ASEv3 needs a /24 network 
        "subnetSpokeAppSvcAddressSpace": {
            "value": "10.240.0.0/26"
        },
        // //CIDRof the subnet that will hold the private link for the AFD Premium 
        // "subnetSpokeAfdIngressAddressSpace": {
        //     "value": "10.240.0.64/26"
        // },
        //CIDR of the subnet that will hold devOps agents etc 
        "subnetSpokeDevOpsAddressSpace": {
            "value": "10.240.10.128/26"
        },
        //CIDR of the subnet that will hold the private endpoints of the supporting services 
        "subnetSpokePrivateEndpointAddressSpace": {
            "value": "10.240.11.0/24"
        },
        // Defines the name, tier, size, family and capacity of the App Service Plan. Plans ending to _AZ, are deploying at least three instances in three Availability Zones. EP* is only for functions'
        // select one from: 'S1', 'S2', 'S3', 'P1V3', 'P2V3', 'P3V3', 'P1V3_AZ', 'P2V3_AZ', 'P3V3_AZ', 'EP1', 'EP2', 'EP3', 'ASE_I1V2_AZ', 'ASE_I2V2_AZ', 'ASE_I3V2_AZ', 'ASE_I1V2', 'ASE_I2V2', 'ASE_I3V2'
        "webAppPlanSku": {
            "value": "S1"
        },
        // two options: Windows or Linux
        "webAppBaseOs": {
            "value": "Windows"
        },
        // admin username of the VM agent deployed in the Spoke
        "adminUsername": {
            "value": "azureuser"
        },
        // admin password of the VM agent deployed in the Spoke
        "adminPassword": {
            "value": "strongpassword"
        },
        //Resource tags that we might need to add to all resources (i.e. Environment, Cost center, application name etc)
        "resourceTags": {
            "value": {
                "deployment": "bicep"
            }
        },
        // The Microsoft Entra ID administrator group used for SQL Server authentication
        "sqlServerAdministrators": {
            "value": {
                // Microsoft Entra group where your Azure administrators are members
                "login": "Microsoft Entra SQL Admins",
                // Microsoft Entra object ID of the group
                "sid": "xxx-xxxx-xxxx-xxxx",
                // Microsoft Entra tenant ID where the group is located
                "tenantId": "xxxx-xxxxxx-xxxxx-xxxxx-xxx"
            }
        }
    }
}