How jtracey93/alz-bicep works
ALZ-Bicep Classic is a collection of Bicep modules for deploying Azure Landing Zone platform capabilities. The documented user flow is to deploy modules individually from the command line; the README also describes policy, management-group, subscription-placement, networking, and logging concerns. The tree supports these capability areas, but no source excerpts were provided, so internal module calls and deployment ordering cannot be established here.
Main entry points: managementGroups.bicep Management groups · subscriptionPlacement Subscription placement · resourceGroup Resource groups · definitions Policy definitions
Components 16
Platform foundation
- Management groups
infra-as-code/bicep/modules/managementGroups/managementGroups.bicep - Subscription placement
infra-as-code/bicep/modules/subscriptionPlacement - Resource groups
infra-as-code/bicep/modules/resourceGroup
Governance and policy
- Policy definitions
infra-as-code/bicep/modules/policy/definitions - Policy assignments
infra-as-code/bicep/modules/policy/assignments/alzDefaults/alzDefaultPolicyAssignments.bicep - Custom roles
infra-as-code/bicep/modules/customRoleDefinitions/customRoleDefinitions.bicep - Role assignments
infra-as-code/bicep/modules/roleAssignments
Connectivity
- Hub networking
infra-as-code/bicep/modules/hubNetworking/hubNetworking.bicep - Spoke networking
infra-as-code/bicep/modules/spokeNetworking - Virtual WAN
infra-as-code/bicep/modules/vwanConnectivity - VNet peering
infra-as-code/bicep/modules/vnetPeering
Operations and telemetry
- Logging services
infra-as-code/bicep/modules/logging/logging.bicep - Diagnostic settings
infra-as-code/bicep/modules/mgDiagSettings/mgDiagSettings.bicep - Usage attribution
infra-as-code/bicep/CRML/customerUsageAttribution
Other components
- Platform engineer
- Azure resources
Connections 28
- Platform engineer → Management groups: deploys individually
README.md - Platform engineer → Subscription placement: deploys individually
README.md - Platform engineer → Resource groups: deploys individually
README.md - Platform engineer → Policy definitions: deploys individually
README.md - Platform engineer → Policy assignments: deploys individually
README.md - Platform engineer → Custom roles: deploys individually
README.md - Platform engineer → Role assignments: deploys individually
README.md - Platform engineer → Hub networking: deploys individually
README.md - Platform engineer → Spoke networking: deploys individually
README.md - Platform engineer → Virtual WAN: deploys individually
README.md - Platform engineer → VNet peering: deploys individually
README.md - Platform engineer → Logging services: deploys individually
README.md - Platform engineer → Diagnostic settings: deploys individually
README.md - Platform engineer → Usage attribution: deploys individually
README.md - Management groups → Azure resources: deploys resources
README.md - Subscription placement → Azure resources: deploys resources
README.md - Resource groups → Azure resources: deploys resources
README.md - Policy definitions → Azure resources: deploys resources
README.md - Policy assignments → Azure resources: deploys resources
README.md - Custom roles → Azure resources: deploys resources
README.md - Role assignments → Azure resources: deploys resources
README.md - Hub networking → Azure resources: deploys resources
README.md - Spoke networking → Azure resources: deploys resources
README.md - Virtual WAN → Azure resources: deploys resources
README.md - VNet peering → Azure resources: deploys resources
README.md - Logging services → Azure resources: deploys resources
README.md - Diagnostic settings → Azure resources: deploys resources
README.md - Usage attribution → Azure resources: deploys resources
README.md