CanadaESLZ-main.yml

# ----------------------------------------------------------------------------------
# Copyright (c) Microsoft Corporation.
# Licensed under the MIT license.
#
# THIS CODE AND INFORMATION ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, 
# EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES 
# OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.
# ----------------------------------------------------------------------------------

# Environment YAML files can be used to supplement
# the variables specified in 'config/variables/common.yml'. You can:
#   * Override existing common-vars.yml variable value settings, and
#   * Create new variable values not present in common-vars.yml
#
# The naming convention for these YAML files is:
#   {organization}-{branch}.yml
#
# where {organization} is the organization variable from the
#         common.yml file
# and   {branch} is the Azure Repos branch name used by the
#         currently executing pipeline.

variables:
  deploymentRegion: canadacentral

  # Management Groups
  var-managementgroup-hierarchy: >
    {
      "name": "Tenant Root Group",
      "id": "343ddfdb-bef5-46d9-99cf-ed67d5948783",
      "children": [
        {
          "name": "Azure Landing Zones for Canadian Public Sector",
          "id": "pubsec",
          "children": [
            {
              "name": "Platform", "id": "pubsecPlatform",
              "children": [
                { "name": "Identity", "id": "pubsecPlatformIdentity", "children": [] },
                { "name": "Connectivity", "id": "pubsecPlatformConnectivity", "children": [] },
                { "name": "Management", "id": "pubsecPlatformManagement", "children": [] }
              ]
            },
            {
              "name": "LandingZones", "id": "pubsecLandingZones",
              "children": [
                { "name": "DevTest", "id": "pubsecLandingZonesDevTest", "children": [] },
                { "name": "QA", "id": "pubsecLandingZonesQA", "children": [] },
                { "name": "Prod", "id": "pubsecLandingZonesProd", "children": [] }
              ]
            },
            {
              "name": "Sandbox", "id": "pubsecSandbox",
              "children": []
            }
          ]
        }
      ]
    }

  # Logging
  var-logging-region: canadacentral
  var-logging-managementGroupId: pubsecPlatformManagement
  var-logging-subscriptionId: bc0a4f9f-07fa-4284-b1bd-fbad38578d3a
  var-logging-configurationFileName: logging.parameters.json

  ## This parameter is only used for HIPAA/HITRUST Policy Assignment
  var-logging-diagnosticSettingsforNetworkSecurityGroupsStoragePrefix: pubsecnsg

  # Hub Networking
  var-hubnetwork-region: canadacentral
  var-hubnetwork-managementGroupId: pubsecPlatformConnectivity
  var-hubnetwork-subscriptionId: ed7f4eed-9010-4227-b115-2a5e37728f27

  ## Hub Network configuration using Azure Firewall - required when Azure Firewall is used
  var-hubnetwork-azfwPolicy-configurationFileName: hub-azfw-policy/azure-firewall-policy.parameters.json
  var-hubnetwork-azfw-configurationFileName: hub-azfw/hub-network.parameters.json

  ## Hub Network configuration using Network Virtual Appliance (NVA) - required when Network Virtual Appliance (NVA) like Fortigate Firewalls are used
  var-hubnetwork-nva-configurationFileName: hub-nva/hub-network.parameters.json