CreateNewEncryptedWindowsVM-AADClientSecret.json

{
    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "vmName": {
            "type": "string",
            "metadata": {
                "Description": "Name of the virtual machine"
            }
        },
        "adminUsername": {
            "type": "string",
            "metadata": {
                "Description": "Admin user name for the virtual machine"
            }
        },
        "adminPassword": {
            "type": "securestring",
            "metadata": {
                "Description": "Admin user password for virtual machine"
            }
        },
        "storageAccountName": {
            "type": "string",
            "metadata": {
                "Description": "storage account to store os vhd"
            }
        },
        "vmStorageContainerName": {
            "type": "string",
            "defaultValue": "vhds",
            "metadata": {
                "Description": "Name of the storage account container to store os vhd"
            }
        },
        "vmSize": {
            "type": "string",
            "defaultValue": "Standard_D2",
            "allowedValues": [
                "Standard_D1",
                "Standard_D2",
                "Standard_D3",
                "Standard_D4",
                "Standard_D11",
                "Standard_D12",
                "Standard_D13",
                "Standard_D14"
            ],            
            "metadata": {
                "Description": "Size of VM"
            }
        },
        "virtualNetworkName": {
            "type": "string",
            "metadata": {
                "Description": "Name of VNET to which the VM NIC belongs to"
            }
        },
        "subnetName": {
            "type": "string",
            "metadata": {
                "Description": "Name of Subnet to which the VM NIC belongs to"
            }
        },
        "AADClientID": {
            "type": "string",
            "metadata": {
                "Description": "Client ID of AAD app which has permissions to KeyVault"
            }
        },
        "AADClientSecret": {
            "type": "securestring",
            "metadata": {
                "Description": "Client Secret of AAD app which has permissions to KeyVault"
            }
        },
        "KeyVaultResourceID": {
            "type": "string",
            "metadata": {
                "Description": "ResourceID of the KeyVault to place the volume encryption key"
            }
        },
        "KeyVaultURL": {
            "type": "string",
            "metadata": {
                "Description": "URL of the KeyVault to place the volume encryption key"
            }
        }
    },
    "variables": {
        "imagePublisher": "MicrosoftWindowsServer",
        "imageOffer": "WindowsServer",
        "osSku": "2012-R2-Datacenter",
        "osDiskName": "[toLower(concat('osDisk',parameters('vmName')))]",
        "vnetID": "[resourceId('Microsoft.Network/virtualNetworks',parameters('virtualNetworkName'))]",
        "subnetRef": "[concat(variables('vnetID'),'/subnets/',parameters('subnetName'))]",
        "dnsNameForPublicIP": "[toLower(parameters('vmName'))]",
        "publicIPAddressName": "[toLower(concat('publicIP',parameters('vmName')))]",
        "publicIPAddressType": "Dynamic",
        "nicName": "[toLower(concat('nic',parameters('vmName')))]"
    },

    "resources": [
        {
            "apiVersion": "2015-06-15",
            "type": "Microsoft.Network/publicIPAddresses",
            "name": "[variables('publicIPAddressName')]",
            "location": "[resourceGroup().location]",
            "properties": {
                "publicIPAllocationMethod": "[variables('publicIPAddressType')]",
                "dnsSettings": {
                    "domainNameLabel": "[variables('dnsNameForPublicIP')]"
                }
            }
        },
        {
            "apiVersion": "2015-06-15",
            "type": "Microsoft.Network/networkInterfaces",
            "name": "[variables('nicName')]",
            "location": "[resourceGroup().location]",
            "dependsOn": [
                "[concat('Microsoft.Network/publicIPAddresses/', variables('publicIPAddressName'))]"
            ],
            "properties": {
                "ipConfigurations": [
                    {
                        "name": "ipconfig1",
                        "properties": {
                            "privateIPAllocationMethod": "Dynamic",
                            "publicIPAddress": {
                                "id": "[resourceId('Microsoft.Network/publicIPAddresses',variables('publicIPAddressName'))]"
                            },
                            "subnet": {
                                "id": "[variables('subnetRef')]"
                            }
                        }
                    }
                ]
            }
        },
        {
            "apiVersion": "2015-06-15",
            "type": "Microsoft.Compute/virtualMachines",
            "name": "[parameters('vmName')]",
            "location": "[resourceGroup().location]",
            "dependsOn": [
                "[concat('Microsoft.Network/networkInterfaces/', variables('nicName'))]"
            ],
            "properties": {
                "hardwareProfile": {
                    "vmSize": "[parameters('vmSize')]"
                },
                "osProfile": {
                    "computername": "[parameters('vmName')]",
                    "adminUsername": "[parameters('adminUsername')]",
                    "adminPassword": "[parameters('adminPassword')]"
                },
                "storageProfile": {
                    "imageReference": {
                        "publisher": "[variables('imagePublisher')]",
                        "offer": "[variables('imageOffer')]",
                        "sku": "[variables('osSku')]",
                        "version": "latest"
                    },
                    "osDisk": {
                        "name": "[variables('osDiskName')]",
                        "vhd": {
                            "uri": "[concat('http://',parameters('storageAccountName'),'.blob.core.windows.net/',parameters('vmStorageContainerName'),'/',variables('osDiskName'),'.vhd')]"
                        },
                        "caching": "ReadWrite",
                        "createOption": "FromImage"
                    }
                },
                "networkProfile": {
                    "networkInterfaces": [
                        {
                            "id": "[resourceId('Microsoft.Network/networkInterfaces',variables('nicName'))]"
                        }
                    ]
                }
            }
        },
        {
            "name": "UpdateEncryptionSettings",
            "type": "Microsoft.Resources/deployments",
            "apiVersion": "2015-01-01",
            "dependsOn": [
                "[concat('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"
            ],
            "properties": {
                "mode": "Incremental",
                "templateLink": {
                    "uri": "https://raw.githubusercontent.com/aravindthoram/DiskEncryption/master/EnableEncryptionOnRunningWindowsVM-AADClientSecret.json",
                    "contentVersion": "1.0.0.0"
                },
                "parameters": {
                    "vmName": {
                        "value": "[parameters('vmName')]"
                    },
                    "AADClientID": {
                        "value": "[parameters('AADClientID')]"
                    },
                    "AADClientSecret": {
                        "value": "[parameters('AADClientSecret')]"
                    },
                    "KeyVaultResourceID": {
                        "value": "[parameters('KeyVaultResourceID')]"
                    },
                    "KeyVaultURL": {
                        "value": "[parameters('KeyVaultURL')]"
                    },
                    "osDiskName": {
                        "value": "[variables('osDiskName')]"
                    }
                }
            }
        }
    ]
}