Azure / avdaccelerator

AVD Accelerator deployment automation to simplify the setup of AVD (Azure Virtual Desktop) based on best practices
MIT License
342 stars 214 forks source link

Add Zero Trust Option for Storage Accounts / CMK #713

Open JCoreMS opened 1 week ago

JCoreMS commented 1 week ago

Overview/Summary

This change incorporates updates to the baseline deployment to add an option in the Storage section of the UI for Zero Trust which then allows for an additional Key Vault to be deployed. Keys created for each storage account and Customer Managed Keys configured for each storage account.

This PR fixes/adds/changes/removes

  1. Adjusted UI definition for custom names - prefix regex set for 1-6 chars but validation mesg said 1-90.
  2. Adds check box for Zero Trust in Custom UI Storage section
  3. Code includes logic to handle and deploy additional key vault, keys and associates with existing identity and storage accounts.

Breaking Changes

  1. N/A

Testing Evidence

Tested deployment in lab environment with multiple scenarios and successfully deployed each time to include the changes added with the option flag set.

As part of this Pull Request I have