This repository includes a library of mature and curated Bicep modules as well as a Continuous Integration (CI) environment leveraged for modules' validation and versioned publishing.

The CI environment supports both ARM and Bicep and can be leveraged using GitHub actions as well as Azure DevOps pipelines.

In between now and the release of version 0.11.0, the main branch is subject to several upcoming breaking changes that will affect all modules (e.g., the renaming of folders and files).

The rationale is an ongoing effort to prepare our modules for a release in the official Public Bicep Registry, forcing us to align the structural requirements.

For more details, please refer to the issue #3131.

• For introduction guidance visit the Wiki
• For guidance on which version of the code to leverage, see Disclaimer
• For information on contributing, see Contribution
• File an issue via GitHub Issues
• For reference documentation, visit Enterprise-Scale
• For an outline of the module features, visit Module overview

Note: To ensure the modules and environment work as expected, please ensure you are using the latest version of the used tools such as PowerShell and Bicep. Especially in case of the later, note, that you need to manually update the Bicep CLI. For further information, see our troubleshooting guide.

Provider namespace	Resource Type	Name	Deploy
Microsoft.AAD	domainServices	Azure Active Directory Domain Services
Microsoft.AnalysisServices	servers	Analysis Services Servers
Microsoft.ApiManagement	service	API Management Services
Microsoft.App	containerApps	Container Apps
	managedEnvironments	App ManagedEnvironments
Microsoft.AppConfiguration	configurationStores	App Configuration Stores
Microsoft.Authorization	locks	Authorization Locks (All scopes)
	policyAssignments	Policy Assignments (All scopes)
	policyDefinitions	Policy Definitions (All scopes)
	policyExemptions	Policy Exemptions (All scopes)
	policySetDefinitions	Policy Set Definitions (Initiatives) (All scopes)
	roleAssignmentApprovals	Role Assignments (All scopes)
	roleDefinitions	Role Definitions (All scopes)
Microsoft.Automation	automationAccounts	Automation Accounts
Microsoft.Batch	batchAccounts	Batch Accounts
Microsoft.Cache	Redis	Redis Cache
Microsoft.Cdn	profiles	CDN Profiles
Microsoft.CognitiveServices	accounts	Cognitive Services
Microsoft.Compute	availabilitySets	Availability Sets
	diskEncryptionSets	Disk Encryption Sets
	diskAccesses	Compute Disks
	galleries	Azure Compute Galleries
	images	Images
	proximityPlacementGroups	Proximity Placement Groups
	sshPublicKeys	Public SSH Keys
	virtualMachineScaleSets	Virtual Machine Scale Sets
	virtualMachines	Virtual Machines
Microsoft.Consumption	budgets	Consumption Budgets
Microsoft.ContainerInstance	containerGroups	Container Instances Container Groups
Microsoft.ContainerRegistry	registries	Azure Container Registries (ACR)
Microsoft.ContainerService	managedClusters	Azure Kubernetes Service (AKS) Managed Clusters
Microsoft.DataFactory	factories	Data Factories
Microsoft.DataProtection	backupVaults	Data Protection Backup Vaults
Microsoft.Databricks	workspaces	Azure Databricks Workspaces
Microsoft.DBforMySQL	flexibleServers	DBforMySQL Flexible Servers
Microsoft.DBforPostgreSQL	flexibleServers	DBforPostgreSQL Flexible Servers
Microsoft.DesktopVirtualization	applicationGroups	Azure Virtual Desktop (AVD) Application Groups
	hostPools	Azure Virtual Desktop (AVD) Host Pools
	scalingPlans	Azure Virtual Desktop (AVD) Scaling Plans
	workspaces	Azure Virtual Desktop (AVD) Workspaces
Microsoft.DevTestLab	labs	DevTest Labs
Microsoft.DigitalTwins	digitalTwinsInstances	Digital Twins Instances
Microsoft.DocumentDB	databaseAccountNames	DocumentDB Database Accounts
Microsoft.EventGrid	domains	Event Grid Domains
	systemTopics	Event Grid System Topics
	topics	Event Grid Topics
Microsoft.EventHub	namespaces	Event Hub Namespaces
Microsoft.HealthBot	healthBots	Azure Health Bots
Microsoft.HealthcareApis	workspaces	Healthcare API Workspaces
Microsoft.Insights	actionGroups	Action Groups
	activityLogAlerts	Activity Log Alerts
	components	Application Insights
	dataCollectionEndpoints	Data Collection Endpoints
	dataCollectionRuleAssociations	Data Collection Rules
	diagnosticSettings	Diagnostic Settings (Activity Logs) for Azure Subscriptions
	metricAlerts	Metric Alerts
	privateLinkScopeOperationStatuses	Azure Monitor Private Link Scopes
	scheduledQueryRules	Scheduled Query Rules
	webtests	Web Tests
Microsoft.KeyVault	vaults	Key Vaults
Microsoft.KubernetesConfiguration	extensions	Kubernetes Configuration Extensions
	fluxConfigurations	Kubernetes Configuration Flux Configurations
Microsoft.Logic	workflows	Logic Apps (Workflows)
Microsoft.MachineLearningServices	workspaces	Machine Learning Services Workspaces
Microsoft.Maintenance	maintenanceConfigurations	Maintenance Configurations
Microsoft.ManagedIdentity	userAssignedIdentities	User Assigned Identities
Microsoft.ManagedServices	registrationDefinitions	Registration Definitions
Microsoft.Management	managementGroups	Management Groups
Microsoft.NetApp	netAppAccounts	Azure NetApp Files
Microsoft.Network	ApplicationGatewayWebApplicationFirewallPolicies	Application Gateway Web Application Firewall (WAF) Policies
	applicationGatewayAvailableRequestHeaders	Network Application Gateways
	applicationSecurityGroups	Application Security Groups (ASG)
	azureFirewallFqdnTags	Azure Firewalls
	bastionHosts	Bastion Hosts
	connections	Virtual Network Gateway Connections
	ddosProtectionPlans	DDoS Protection Plans
	dnsForwardingRulesets	Dns Forwarding Rulesets
	dnsResolvers	DNS Resolvers
	dnsZones	Public DNS Zones
	expressRouteCircuits	ExpressRoute Circuits
	expressRouteGateways	Express Route Gateways
	firewallPolicies	Firewall Policies
	frontdoorOperationResults	Azure Front Doors
	ipGroups	IP Groups
	loadBalancers	Load Balancers
	localNetworkGateways	Local Network Gateways
	natGateways	NAT Gateways
	networkInterfaces	Network Interface
	networkManagerConnections	Network Managers
	networkSecurityGroups	Network Security Groups
	networkWatchers	Network Watchers
	privateDnsZones	Private DNS Zones
	privateEndpointRedirectMaps	Private Endpoints
	privateLinkServices	Private Link Services
	publicIPAddresses	Public IP Addresses
	publicIPPrefixes	Public IP Prefixes
	routeTables	Route Tables
	serviceEndpointPolicies	Service Endpoint Policies
	trafficmanagerprofiles	Traffic Manager Profiles
	virtualHubs	Virtual Hubs
	virtualNetworkGateways	Virtual Network Gateways
	virtualNetworkGateways	Virtual Networks
	virtualWans	Virtual WANs
	vpnGateways	VPN Gateways
	vpnSites	VPN Sites
Microsoft.OperationalInsights	workspaces	Log Analytics Workspaces
Microsoft.OperationsManagement	solutions	Operations Management Solutions
Microsoft.PolicyInsights	remediations	Policy Insights Remediations
Microsoft.PowerBIDedicated	capacities	Power BI Dedicated Capacities
Microsoft.Purview	accounts	Purview Accounts
Microsoft.RecoveryServices	vaults	Recovery Services Vaults
Microsoft.Relay	namespaces	Relay Namespaces
Microsoft.Resources	deploymentScripts	Deployment Scripts
	resourceGroups	Resource Groups
	tagNamespaceOperationResults	Resources Tags
Microsoft.Security	security	Azure Security Center (Defender for Cloud)
Microsoft.ServiceBus	namespaces	Service Bus Namespaces
Microsoft.ServiceFabric	clusters	Service Fabric Clusters
Microsoft.SignalRService	signalR	SignalR Service SignalR
	webPubSub	SignalR Web PubSub Services
Microsoft.Sql	managedInstances	SQL Managed Instances
	servers	Azure SQL Servers
Microsoft.Storage	storageAccounts	Storage Accounts
Microsoft.Synapse	privateLinkHubs	Azure Synapse Analytics
	workspaces	Synapse Workspaces
Microsoft.VirtualMachineImages	imageTemplates	Virtual Machine Image Templates
Microsoft.Web	connectionGateways	API Connections
	hostingEnvironments	App Service Environments
	serverfarms	App Service Plans
	sites	Web/Function Apps
	staticSites	Static Web Apps

Name	Status
Update API Specs file
Assign Pull Request to Author
Test - ConvertTo-ARMTemplate.ps1
Clean up deployment history
Library PSRule pre-flight validation
Broken Links Check
Linter (audit)
Manage issues for failing pipelines
Update ReadMe Module Tables
Update Static Test Documentation
Sync Docs/Wiki

Please note that CARML is constantly evolving and introducing new features. The main branch of this repository changes frequently and thus, it always contains the latest available version of the code. Some of the updates may introduce breaking changes as well.

• Default path: To avoid disruptions, use distinct versions available through releases.
• Early adopter path: If the risk of breaking changes is understood and accepted, you can use the code in the main branch directly. However, the CARML team recommends against automatically pulling code from main. It is always recommended to review changes before you pull them into your own repository.

This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.

When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

For specific guidelines on how to contribute to this repository please refer to the Contribution guide Wiki section.

This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.

• PowerShell Documentation
• Microsoft Azure Documentation
• GitHubDocs
• Azure Resource Manager
• Bicep

Modules provided in this library have telemetry enabled by default. To learn more about this feature, please refer to the Telemetry article in the wiki.