Add files via upload

SQL.bicep

@@ -0,0 +1,92 @@
+@description('The sqladmin password of the SQL logical server.')
+@secure()
+param pSQLPassword string
+
+@description('The sqladmin password of the SQL logical server.')
+param pSQLServer object
+
+@description('The AD related object to be integrated.')
+param pActiveDirectory object
+
+
+@description('Az SQL Server lock if required.')
+param pLock object
+
+@description('change tags if required.')
+param pTag object
+
+@description('Location for sql resources.')
+param pLocation string = resourceGroup().location
+
+
+var vTag = (empty(pTag) ? json('null') : pTag)
+
+
+resource sqlServer 'Microsoft.Sql/servers@2022-02-01-preview' = {
+  name: pSQLServer.Name
+  location: pLocation
+  tags: vTag
+  identity: {
+    type: 'SystemAssigned'
+  }
+  properties: {
+    administratorLogin: pSQLServer.Username
+    administratorLoginPassword: pSQLPassword
+    version: pSQLServer.Version
+    minimalTlsVersion: pSQLServer.MinimalTLSVersion
+    publicNetworkAccess: pSQLServer.PublicNetworkAccess
+  }
+}
+
+resource sqlDBMaster 'Microsoft.Sql/servers/databases@2022-02-01-preview' = {
+  parent: sqlServer
+  name: 'master'
+  location: pLocation
+  properties: {
+  }
+}
+
+resource ResourceLock 'Microsoft.Authorization/locks@2020-05-01' = if (pLock.Deploy) {
+  scope: sqlServer
+  name: 'sqlServerLock'
+  properties: {
+    level: pLock.Type
+    notes: pLock.Notes
+  }
+}
+
+resource connectionPolicies 'Microsoft.Sql/servers/connectionPolicies@2022-02-01-preview' = {
+  parent: sqlServer
+  name: 'default'
+  properties: {
+    connectionType: pSQLServer.ConnectionType
+  }
+}
+
+resource administrators_activeDirectory 'Microsoft.Sql/servers/administrators@2022-02-01-preview' = if (pActiveDirectory.Deploy) {
+  parent: sqlServer
+  name: 'ActiveDirectory'
+  properties: {
+    administratorType: 'ActiveDirectory'
+    login: pActiveDirectory.AdminGroup
+    sid: pActiveDirectory.AdminGroupSID
+  }
+  dependsOn: [
+    connectionPolicies
+  ]
+}
+
+resource azureADOnlyAuthentications 'Microsoft.Sql/servers/azureADOnlyAuthentications@2022-02-01-preview' = if (pActiveDirectory.AADOnlyAuthentication && (!empty(pActiveDirectory.AdminGroup))) {
+  parent: sqlServer
+  name: 'default'
+  properties: {
+    azureADOnlyAuthentication: pActiveDirectory.AADOnlyAuthentication
+  }
+  dependsOn: [
+    connectionPolicies
+    administrators_activeDirectory
+  ]
+}
+
+
+

SQL.param.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
+  "contentVersion": "1.0.0.0",
+  "parameters": {
+    "pSQLPassword": {
+      "reference": {
+        "keyVault": {
+          "id": "/subscriptions/SQL DB & MI - MT Ind ( v-munm ) - Muneswara Reddy M/resourceGroups/SaiTest"
+        },
+        "secretName": "sqladmin"
+      }
+    },
+    "pSQLServer": {
+      "value": {
+        "Name": "saisrv",
+        "Username": "sai", 
+        "Version": "12.0",
+        "PublicNetworkAccess": "Enabled",
+        "ConnectionType": "Default",
+        "MinimalTLSVersion": "1.2"
+      }
+    },
+    "pActiveDirectory": {
+      "value": {
+        "Deploy": true,
+        "AdminGroup": "v-vmoganti@microsoft.com",
+        "AdminGroupSID": "4daf82fb-f2d0-4392-9823-10371afb7d1c",
+        "AADOnlyAuthentication": true
+      }
+    },
+    "pLock": {
+      "value": {
+        "Deploy": false,
+        "Type": "CanNotDelete",
+        "Notes": "SetByARMTemplate"
+      }
+    },
+    "pTag": {
+      "value": {
+      }
+    }
+  }
+}