Azure Bicep Repository

July 6, 2026 · View on GitHub

This repository contains Azure Bicep templates and PowerShell scripts for deploying and managing Azure resources.

Structure

ALZ/ - Azure Landing Zones management group hierarchy
- MGMT/ - Management group configuration
- PIM/ - Privileged Identity Management in ALZ scope
Arc/ - Azure Arc configurations for hybrid cloud
- Kubernetes/ - Arc-enabled Kubernetes clusters
Bastion/ - Secure RDP/SSH access configurations
Networking/ - Virtual networks, NSGs, and network infrastructure
- Bastion/ - Network-integrated Bastion host
- CIDR-Functions/ - CIDR calculation and address space functions
- MPS/ - Microsoft Purview/Private endpoint scenarios
- Network Security Perimeter/ - Network Security Perimeter configurations
- Network as Code/ - Infrastructure-as-code network deployments (VNet, Firewall)

AI/ - AI and ML services
- Computer Vision/ - Computer Vision API implementations
- OpenAI/ - Azure OpenAI service integration with PowerShell
- SRE/ - Site Reliability Engineering for AI services
CoPilot/ - Copilot integrations
- Custom Instructions/ - Custom Copilot instructions
Security Copilot/ - Security Copilot integrations

Entra External ID/ - External identity configurations
- No-WAF/ - CIAM without Web Application Firewall
Entra ID/ - Entra ID (Azure AD) templates
- Kerberos Authentication/ - Kerberos authentication with Storage accounts
- Federated Identity Credential/ - Workload identity federation
- Managed Identities/ - Managed identity role assignments
PIM/ - Privileged Identity Management role automation
MDFC/ - Microsoft Defender for Cloud security posture
Multi-User Authorization/ - Multi-user authorization patterns
Maester/ - Security testing and compliance automation
- AutomationAccount/ - Maester via Automation Account
- WebApp/ - Maester via App Service web app

ACS/ - Azure Container Service configurations
Azure Container Apps/ - Container Apps deployments
- DeepSeek/ - DeepSeek model deployment on Container Apps
- Flexible/ - Flexible Container Apps environment
- Microsoft Graph/Conditional Access Exporter/ - Conditional Access policy exporter via Graph API
Azure Compute Gallery/ - Compute gallery templates
Azure Virtual Desktop/ - Azure Virtual Desktop deployments
- Session Host Config/ - AVD session host configuration
Functions/ - Serverless Azure Functions
- Deployer/ - Function App with VNet integration
Packer/ - Packer image building pre-requisite resources
Local/ - Local VM and development environment setup
- Aks/ - Local AKS cluster deployment
- VMs/ - Local virtual machine images and compute

Managed DevOps Pools/ - Azure Managed DevOps Pools
Maintenance Configurations/ - Maintenance window configurations
- Firewall/ - Maintenance config for Azure Firewall
- VNet Gateway/ - Maintenance config for VNet Gateways
Service Groups/ - Service group configurations
- Resources/ - Service group resource relationship definitions

EPAC/ - Enterprise Policy as Code for Azure Policy management
- ALZ/ - ALZ-aligned policy pre-requisites (DCR, UAMI)
- PolicyAssignment/ - Policy assignment templates
FinOps/ - Financial operations and cost management
- AVM/ - FinOps using Azure Verified Modules

Experimental Features/ - Testing new Azure features
- localDeploy/ - Local deployment experiments (HTTP extension, Kubernetes)
Scripting/ - Utility scripts and helpers
- Azure Update Manager/ - Update Manager automation scripts
- DeploymentScripts/ - Inline deployment script templates

Bicep Features/ - New Bicep language features and functions
- Functions/ - Built-in function examples
  - like/ - Pattern matching with wildcards
  - distinct/ - Array deduplication

Complete Azure Landing Zone hierarchy with root management groups, platform zones, and landing zones for Corp and Online workloads.

Automated security testing with Maester, PIM automation, MDFC integration, and PSRule validation for infrastructure as code.

Azure OpenAI integration, Computer Vision APIs, and SRE patterns for AI workloads.

FinOps templates for cost optimization, budget alerts, and financial governance.

Azure CLI or PowerShell Az module
Bicep CLI
Appropriate Azure permissions (Owner/Contributor at subscription/management group level)