Azure Bicephub

Public IaC orchestrator to deploy secure Azure architectures at scale following best practices.

Use Cases

Simultaneously Deploy

To multiple environments (e.g. dev, qa, uat, staging, prod)
To multiple regions for BCDR (eastus and westus3 | eastus2, centralus, uksouth and japaneast, etc.)
One Azure Resource (e.g. 1 Front Door, 1 Internal Load Balancer, 1 Azure Cache for Redis, etc.)
Multiple Azure Resources of the same type (e.g. 10 Private DNS Zones, 20 App Service Plans, 30 App Services, etc.)
The Combination of Multiple Azure Services (1 Virtual Wan, 4 Secured Virtual Hubs, 4 Bastions, 1 Key Vault, etc.)
Available Azure Services

Reference Architectures

Imagine Architecture

Azure Front Door
Azure App Service Plan
Azure App Services

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o imagine_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-apps.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'imagine' \
  --template-file main.bicep \
  --parameters @imagine_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'imagine' \
  --template-file main.bicep \
  --parameters @imagine_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'imagine' \
  --template-file main.bicep \
  --parameters @imagine_parameters.json

Envision Architecture

Azure Front Door
Azure App Service Plan
- Azure App Services
Azure App Insights
Azure Log Analytics Workspace

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o envision_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-apps-appi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'envision' \
  --template-file main.bicep \
  --parameters @envision_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'envision' \
  --template-file main.bicep \
  --parameters @envision_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'envision' \
  --template-file main.bicep \
  --parameters @envision_parameters.json

Inventory Architecture

Azure Front Door
Azure App Service Plan
- Azure App Services
Azure App Insights
Azure Log Analytics Workspace
Azure Storage Account

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o inventory_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-apps-appi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'inventory' \
  --template-file main.bicep \
  --parameters @inventory_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'inventory' \
  --template-file main.bicep \
  --parameters @inventory_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'inventory' \
  --template-file main.bicep \
  --parameters @inventory_parameters.json

Ether Architecture

Azure Front Door
Azure App Service Plan
- Azure App Services
Azure App Insights
Azure Log Analytics Workspace
Azure SQL Server
- Azure SQL Database

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o ether_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-apps-appi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'ether' \
  --template-file main.bicep \
  --parameters @ether_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'ether' \
  --template-file main.bicep \
  --parameters @ether_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'ether' \
  --template-file main.bicep \
  --parameters @ether_parameters.json

Endeavor Architecture

Azure Front Door
Azure App Service Plan
- Azure App Services
  - Virtual Network integration
Azure App Insights
Azure Log Analytics Workspace
Azure Virtual Networks
Azure Network Security Groups

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o endeavor_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-appsWvintegration-appi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'endeavor' \
  --template-file main.bicep \
  --parameters @endeavor_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'endeavor' \
  --template-file main.bicep \
  --parameters @endeavor_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'endeavor' \
  --template-file main.bicep \
  --parameters @endeavor_parameters.json

Skyfort Architecture

Azure Front Door
Azure App Service Plan
- Azure App Services
Azure App Insights
Azure Log Analytics Workspace
Azure Key Vault
- Private Endpoints
Azure SQL Server
- Azure SQL Database
  - Private Endpoints
Azure Virtual Networks
Azure Network Security Groups
Azure Private DNS Zones

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o skyfort_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-apps-appi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'skyfort' \
  --template-file main.bicep \
  --parameters @skyfort_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'skyfort' \
  --template-file main.bicep \
  --parameters @skyfort_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'skyfort' \
  --template-file main.bicep \
  --parameters @skyfort_parameters.json

Sight Architecture

Azure Key Vault
- Private Endpoints
Azure Cache for Redis
- Private Endpoints
Azure App Service Plan
- Azure App Services
  - Virtual Network integration
  - Private Endpoints
Azure Virtual Networks
Azure Network Security Groups
Azure Private DNS Zones

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o sight_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/appsWpeWvintegrationWpdnsz-appi-kvWpdnsz-redisWpdnsz.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'sight' \
  --template-file main.bicep \
  --parameters @sight_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'sight' \
  --template-file main.bicep \
  --parameters @sight_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'sight' \
  --template-file main.bicep \
  --parameters @sight_parameters.json

Seek Architecture

Azure Front Door
Azure App Service Plan
- Azure App Services
  - Virtual Network integration
  - Private Endpoints
Azure App Insights
Azure Log Analytics Workspace
Azure Virtual Networks
Azure Network Security Groups
Azure Private DNS Zones

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o seek_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-appsWpeWvintegrationWpdnsz-appi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'seek' \
  --template-file main.bicep \
  --parameters @seek_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'seek' \
  --template-file main.bicep \
  --parameters @seek_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'seek' \
  --template-file main.bicep \
  --parameters @seek_parameters.json

Matrix Architecture

Azure Front Door
Azure App Service Plan
- Azure App Services
Azure App Insights
Azure Log Analytics Workspace
Azure Key Vault
Azure Cache for Redis
Azure Virtual Networks
Azure Network Security Groups

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o matrix_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fd-apps-appi-kv-redis.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'matrix' \
  --template-file main.bicep \
  --parameters @matrix_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'matrix' \
  --template-file main.bicep \
  --parameters @matrix_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'matrix' \
  --template-file main.bicep \
  --parameters @matrix_parameters.json

Heal Architecture

Azure Front Door
- Private Links to Origins
Azure App Service Plan
- Azure App Services
  - Virtual Network integration
  - Private Endpoints
Azure Virtual Networks
Azure Network Security Groups
Azure Private DNS Zones

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o heal_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fdWpl-appsWpeWvintegrationWpdnsz-appi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'heal' \
  --template-file main.bicep \
  --parameters @heal_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'heal' \
  --template-file main.bicep \
  --parameters @heal_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'heal' \
  --template-file main.bicep \
  --parameters @heal_parameters.json

Design Architecture

Azure Front Door
- Private Links to Origins
Azure Key Vault
- Private Endpoints
Azure App Service Plan
- Azure App Services
  - Virtual Network integration
  - Private Endpoints
Azure Virtual Networks
Azure Network Security Groups
Azure Private DNS Zones

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o design_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fdWpl-appsWpeWvintegrationWpdnsz-appi-kvWpdnsz.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'design' \
  --template-file main.bicep \
  --parameters @design_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'design' \
  --template-file main.bicep \
  --parameters @design_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'design' \
  --template-file main.bicep \
  --parameters @design_parameters.json

Reach Architecture

Azure Front Door
- Private Links to Origins
Azure Key Vault
- Private Endpoints
Azure Cache for Redis
- Private Endpoints
Azure App Service Plan
- Azure App Services
  - Virtual Network integration
  - Private Endpoints
Azure Virtual Networks
Azure Network Security Groups
Azure Private DNS Zones

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o reach_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fdWpl-appsWpeWvintegrationWpdnsz-appi-kvWpdnsz-redisWpdnsz.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'reach' \
  --template-file main.bicep \
  --parameters @reach_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'reach' \
  --template-file main.bicep \
  --parameters @reach_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'reach' \
  --template-file main.bicep \
  --parameters @reach_parameters.json

Innermost Architecture

Azure Front Door
Virtual Networks
Internal Load Balancer

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o innermost_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/fdWpl-lbi.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'innermost' \
  --template-file main.bicep \
  --parameters @innermost_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'innermost' \
  --template-file main.bicep \
  --parameters @innermost_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'innermost' \
  --template-file main.bicep \
  --parameters @innermost_parameters.json

Connectivity Architecture

Secured Hub and Spoke Extension Pattern Architecture

# download the main bicephub template file
curl -o main.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/main.bicep

# download or create your own json parameter file
curl -o connectivity_parameters.json https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/parameters/vwan-vhub-vpng-bas-spokes.json

# Validate Deployment
az deployment sub validate \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'connectivity' \
  --template-file main.bicep \
  --parameters @connectivity_parameters.json

# Display delta changes to be applied
az deployment sub what-if \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'connectivity' \
  --template-file main.bicep \
  --parameters @connectivity_parameters.json

# Deploy IaC
az deployment sub create \
  --subscription '<sub_id>' \
  --location '<region_name>' \
  --name 'connectivity' \
  --template-file main.bicep \
  --parameters @connectivity_parameters.json

Deploy All Azure Private DNS Zones

Deploy all Azure Private DNS Zones

# download the main bicephub template file
curl -o alz-pdnsz.bicep https://raw.githubusercontent.com/ArtiomLK/azure-bicephub/main/alz-pdnsz.bicep

tags='{"env":"dev", "project":"bicephub", "architecture":"alz-pdnsz"}'; echo $tags

# Deploy IaC
az deployment group create \
  --resource-group 'rg-dns' \
  --name 'alz-pdnsz-deployment' \
  --template-file alz-pdnsz.bicep \
  --parameters vnet_id="/subscriptions/########-####-####-####-############/resourceGroups/<rg-name>/providers/Microsoft.Network/virtualNetworks/<vnet-name>" tags="$tags"

Name		Name	Last commit message	Last commit date
Latest commit History 59 Commits
.github/workflows		.github/workflows
.vscode		.vscode
assets		assets
parameters		parameters
.gitignore		.gitignore
README.md		README.md
alz-pdnsz.bicep		alz-pdnsz.bicep
main.bicep		main.bicep

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Repository files navigation

Azure Bicephub

Use Cases

Simultaneously Deploy

Reference Architectures

Imagine Architecture

Envision Architecture

Inventory Architecture

Ether Architecture

Endeavor Architecture

Skyfort Architecture

Sight Architecture

Seek Architecture

Matrix Architecture

Heal Architecture

Design Architecture

Reach Architecture

Innermost Architecture

Connectivity Architecture

Deploy All Azure Private DNS Zones

About

Releases

Packages

Languages

ArtiomLK/azure-bicephub

Folders and files

Latest commit

History

Repository files navigation

Azure Bicephub

Use Cases

Simultaneously Deploy

Reference Architectures

Imagine Architecture

Envision Architecture

Inventory Architecture

Ether Architecture

Endeavor Architecture

Skyfort Architecture

Sight Architecture

Seek Architecture

Matrix Architecture

Heal Architecture

Design Architecture

Reach Architecture

Innermost Architecture

Connectivity Architecture

Deploy All Azure Private DNS Zones

About

Resources

Stars

Watchers

Forks

Releases

Packages 0

Languages

Packages