Skip to content

feat: Merging the AVM WAF Changes from feature/avm-waf-aligned into dev #146

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 139 commits into from
Jun 25, 2025

Conversation

Abdul-Microsoft
Copy link
Contributor

Purpose

This pull request introduces significant updates to the deployment architecture and configuration, focusing on enabling Azure Well-Architected Framework (WAF)-aligned deployments, improving deployment options, and simplifying infrastructure files. The changes include new documentation, deployment parameters, and the removal of legacy infrastructure scripts.

Deployment Architecture Enhancements:

  • Added a new WAF-aligned deployment option, emphasizing security, reliability, cost optimization, and operational excellence. Detailed architecture and implementation principles are documented in docs/ArchitectureWAF.md and include private networking, managed identities, and centralized monitoring.
  • Updated the README.md to describe the sandbox and WAF-aligned deployment options, linking to relevant documentation.

Deployment Configuration Improvements:

  • Expanded the deployment guide in docs/DeploymentGuide.md to include detailed steps for selecting between sandbox and WAF-aligned configurations, with guidance on parameter customization and best practices. [1] [2]
  • Introduced a new infra/main.waf-aligned.bicepparam file for WAF-aligned deployments, with parameters for monitoring, scaling, redundancy, and private networking.

Infrastructure Simplification:

  • Removed legacy Bicep files for managed identity, Key Vault, and AI Foundry deployments (infra/deploy_managed_identity.bicep, infra/deploy_keyvault.bicep, infra/deploy_ai_foundry.bicep), consolidating functionality into streamlined deployment scripts. [1] [2] [3]
  • Updated infra/main.bicepparam to align parameter naming conventions with the new architecture.

Minor Updates:

  • Simplified the azure.yaml configuration file by removing the environment block, ensuring consistency with the updated deployment process.

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

  • ...

Other Information

Seth and others added 30 commits May 27, 2025 15:46
@Roopan-Microsoft Roopan-Microsoft merged commit b7fd9fb into dev Jun 25, 2025
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants