azureDeploy.json

{
	"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
	"contentVersion": "1.0.0.0",
	"parameters": {
		"DeployJumpBox": {
			"type": "string",
			"allowedValues": [
				"yes",
				"no"
			],
			"defaultValue": "no",
			"metadata": {
				"description": "Deploy a Windows Jumpbox in management subnet"
			}
		},
		"vnetNewOrExisting": {
			"type": "string",
			"allowedValues": [
				"new",
				"existing"
			],
			"defaultValue": "new",
			"metadata": {
				"description": "Identify whether to use a new or existing vnet"
			}
		},
		"virtualNetworkName": {
			"type": "string",
			"defaultValue": "hub-vnet",
			"metadata": {
				"description": "Virtual Network Name"
			}
		},
		"IPFwResourceGroup": {
			"type": "string",
			"defaultValue": "",
			"metadata": {
				"description": "Resource Group for the IP Firewalls "
			}
		},
		"AppGwFwResourceGroup": {
			"type": "string",
			"defaultValue": "",
			"metadata": {
				"description": "Resource Group for the IP Firewalls "
			}
		},
		"EgressFwResourceGroup": {
			"type": "string",
			"defaultValue": "",
			"metadata": {
				"description": "Resource Group for the IP Firewalls "
			}
		},
		"virtualNetworkAddressPrefix": {
			"type": "string",
			"defaultValue": "10.0.0.0/16",
			"metadata": {
				"description": "CIDR for Virtual Network"
			}
		},
		"DeployAppGwFirewall": {
			"type": "string",
			"defaultValue": "no",
			"allowedValues": [
				"no",
				"yes"
			],
			"metadata": {
				"description": "Deploy firewalls and an Application Gateway to secure HTTP traffic"
			}
		},
		"appGatewayName": {
			"type": "string",
			"metadata": {
				"description": "Name of the Application Gateway."
			},
			"defaultValue": "weblb"
		},
		"appGatewayDnsName": {
			"type": "string",
			"metadata": {
				"description": "Application Gateway Public IP DNS nane."
			},
			"defaultValue": "demowebserver"
		},
		"appGatewaySubnetName": {
			"type": "string",
			"defaultValue": "AppGW-External-Subnet",
			"metadata": {
				"description": "Subnet that the Application Gateway will reside in"
			}
		},
		"AppGWSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.11.0/24",
			"metadata": {
				"description": "CIDR for App Gateway"
			}
		},
		"appGwUntrustSubnetName": {
			"type": "string",
			"defaultValue": "appgwuntrust",
			"metadata": {
				"description": "Untrust subnet for Application Gateway Firewalls"
			}
		},
		"appGwUntrustSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.9.0/24",
			"metadata": {
				"description": "Untrust Subnet Prefix for Application Gateway Firewalls"
			}
		},
		"appGwTrustSubnetName": {
			"type": "string",
			"defaultValue": "appgwtrust",
			"metadata": {
				"description": "Trust subnet for Application Gateway Firewalls"
			}
		},
		"appGwTrustSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.10.0/24",
			"metadata": {
				"description": "Trust Subnet Prefix for Application Gateway Firewalls"
			}
		},
		"BootstrapStorageAccount": {
			"defaultValue": "",
			"type": "string",
			"metadata": {
				"description": "Storage account hosting the bootstrap files"
			}
		},
		"StorageAccountAccessKey": {
			"defaultValue": "",
			"type": "string",
			"metadata": {
				"description": "Authentication key to access the storage account"
			}
		},
		"StorageAccountFileShare": {
			"defaultValue": "",
			"type": "string",
			"metadata": {
				"description": "The file share in the storage account where the bootstrap files are located"
			}
		},
		"EgressFWFileShareDirectory": {
			"defaultValue": "",
			"type": "string",
			"metadata": {
				"description": "The subdirectory hosting the bootstrap files. Only required if hosting multiple bootstrap directories on the same share"
			}
		},
		"IpFWFileShareDirectory": {
			"defaultValue": "",
			"type": "string",
			"metadata": {
				"description": "The subdirectory hosting the bootstrap files. Only required if hosting multiple bootstrap directories on the same share"
			}
		},
		"AppFWFileShareDirectory": {
			"defaultValue": "",
			"type": "string",
			"metadata": {
				"description": "The subdirectory hosting the bootstrap files. Only required if hosting multiple bootstrap directories on the same share"
			}
		},
		"mgmtSubnetName": {
			"type": "string",
			"defaultValue": "Mgmt",
			"metadata": {
				"description": "Subnet for Management Network"
			}
		},
		"mgmtSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.0.0/24",
			"metadata": {
				"description": "CIDR for Management Network"
			}
		},
		"deployEgressFirewall": {
			"type": "string",
			"defaultValue": "no",
			"allowedValues": [
				"no",
				"yes"
			],
			"metadata": {
				"description": "Deploy firewall for ip based traffic"
			}
		},
		"untrustSubnetName": {
			"type": "string",
			"defaultValue": "EgressFW-Untrust",
			"metadata": {
				"description": "Subnet for Egress firewall Untrust Network"
			}
		},
		"untrustSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.1.0/24",
			"metadata": {
				"description": "CIDR for Egress firewall Untrust Network"
			}
		},
		"trustSubnetName": {
			"type": "string",
			"defaultValue": "EgressFW-Trust",
			"metadata": {
				"description": "Subnet for Egress firewall Trust Network"
			}
		},
		"trustSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.2.0/24",
			"metadata": {
				"description": "Subnet for Egress firewall Trust Network"
			}
		},
		"Deployipfw": {
			"type": "string",
			"defaultValue": "no",
			"allowedValues": [
				"no",
				"yes"
			],
			"metadata": {
				"description": "Deploy firewalls to secure non HTTP connections from the internet"
			}
		},
		"ipFwLoadBalancerIP": {
			"type": "string",
			"metadata": {
				"description": "IP Address for the IP (non HTTP) load balancer"
			},
			"defaultValue": "10.0.3.100"
		},
		"ipFirewalluntrustSubnetName": {
			"type": "string",
			"defaultValue": "ipFwUntrust",
			"metadata": {
				"description": "Subnet for IP Firewall Untrust Network"
			}
		},
		"ipFirewalluntrustSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.3.0/24",
			"metadata": {
				"description": "CIDR for IP Firewall Untrust Network"
			}
		},
		"ipFirewalltrustSubnetName": {
			"type": "string",
			"defaultValue": "ipFwtrust",
			"metadata": {
				"description": "Subnet for Untrusted Network"
			}
		},
		"ipFirewalltrustSubnetPrefix": {
			"type": "string",
			"defaultValue": "10.0.6.0/24",
			"metadata": {
				"description": "CIDR for IP Firewall Trust Network"
			}
		},
		"loadBalancerName": {
			"type": "string",
			"metadata": {
				"description": "Prefix for loadbalancer Names"
			},
			"defaultValue": "panwfwlb"
		},
		"loadBalancerIP": {
			"type": "string",
			"metadata": {
				"description": "IP Address for the egress load balancer"
			},
			"defaultValue": "10.0.2.100"
		},
		"firewallModel": {
			"type": "string",
			"defaultValue": "bundle1",
			"allowedValues": [
				"byol",
				"bundle1",
				"bundle2"
			],
			"metadata": {
				"description": "byol = Bring Your Own License; bundle1 = Bundle 1 PAYG (Hourly); bundle2 = Bundle 2 PAYG (Hourly)"
			}
		},
		"firewallVmName": {
			"type": "string",
			"metadata": {
				"description": "Name prefix for firewalls"
			},
			"defaultValue": "panwfw"
		},
		"firewallVmSize": {
			"type": "string",
			"allowedValues": [
				"Standard_DS3_v2",
				"Standard_DS4_v2",
				"Standard_DS5_v2"
			],
			"metadata": {
				"description": "Azure VM size for VM-Series"
			},
			"defaultValue": "Standard_DS3_v2"
		},
		"username": {
			"type": "string",
			"defaultValue": "pandemo",
			"metadata": {
				"description": "Username of the administrator account of VM instances"
			}
		},
		"password": {
			"type": "securestring",
			"defaultValue": "Dem0pa$$w0rd",
			"metadata": {
				"description": "Password for the administrator account of all VM instances. Must be specified if Authentication Type is 'password'."
			}
		},
		"networkSecurityGroupName": {
			"type": "string",
			"defaultValue": "nsg",
			"metadata": {
				"description": "Network Security Group Name"
			}
		},
		"networkSecurityGroupInboundIP": {
			"type": "string",
			"metadata": {
				"description": "Your source public IP address. Added to the inbound NSG on eth0 (MGMT), to restrict access to the deployment."
			},
			"defaultValue": "0.0.0.0/0"
		}
	},
	"variables": {
		"EgressFwcustomDataField": "[base64(concat('storage-account=', parameters('BootstrapStorageAccount'), ',access-key=', parameters('StorageAccountAccessKey'), ',file-share=', parameters('StorageAccountFileShare'),',share-directory=', parameters('EgressFWFileShareDirectory')))]",
		"IpFwcustomDataField": "[concat('storage-account=', parameters('BootstrapStorageAccount'), ',access-key=', parameters('StorageAccountAccessKey'), ',file-share=', parameters('StorageAccountFileShare'),',share-directory=', parameters('IpFWFileShareDirectory'))]",
		"AppFwcustomDataField": "[concat('storage-account=', parameters('BootstrapStorageAccount'), ',access-key=', parameters('StorageAccountAccessKey'), ',file-share=', parameters('StorageAccountFileShare'),',share-directory=', parameters('AppFWFileShareDirectory'))]",
		"egressloadBalancerName": "[concat(parameters('loadBalancerName'),'EgressFW')]",
		"ipFwLoadBalancerName": "[concat(parameters('loadBalancerName'),'IPFW')]",
		"appGatewayName": "[concat(parameters('loadBalancerName'),'appgw')]",
		"ipLoadBalancerSku": "Standard",
		"ipFirewallinboundLoadBalancerSku": "Standard",
		"baseUrl": "https://raw.githubusercontent.com/jharris10/azure-svcs-hub/master",
		"deployAppGwFirewallURL": "[concat(variables('baseUrl'),'/nested/DeployAppFirewall.json')]",
		"deployEgressFirewallURL": "[concat(variables('baseUrl'),'/nested/DeployEgressFirewall.json')]",
		"deployInboundFirewallURL": "[concat(variables('baseUrl'),'/nested/DeployIPFirewall.json')]",
		"deployEgressLoadBalancerURL": "[concat(variables('baseUrl'),'/nested/DeployEgressLoadBalancer.json')]",
		"DeployIPLoadBalancerURL": "[concat(variables('baseUrl'),'/nested/DeployIPLoadBalancer.json')]",
		"DeployAppGwlbURL": "[concat(variables('baseUrl'),'/nested/DeployAppGw.json')]",
		"deployNsgURL": "[concat(variables('baseUrl'),'/nested/deployNsg.json')]",
		"vnetURL": "[concat(variables('baseUrl'),'/nested/vnet-',parameters('vnetNewOrExisting'),'.json')]",
		"deployJumpBoxURL": "[concat(variables('baseUrl'),'/nested/DeployJumpBox.json')]",
		"location": "[resourceGroup().location]",
		"virtualNetworkRG": "vnetrg",
		"egressfwrg": "[parameters('EgressFwResourceGroup')]",
		"ipfwrg": "[parameters('IpFwResourceGroup')]",
		"vnetrg": "vnetrg",
		"appgwfwrg": "[parameters('AppGwFwResourceGroup')]",
		
	},
	"resources": [
		{
			"name": "deployNsg",
			"apiVersion": "2017-05-10",
			"type": "Microsoft.Resources/deployments",
			"resourceGroup": "[variables('vnetrg')]",
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('deployNsgURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"location": {
						"value": "[variables('location')]"
					},
					"nsgName": {
						"value": "[parameters('networkSecurityGroupName')]"
					},
					"srcIPInboundNSG": {
						"value": "[parameters('networkSecurityGroupInboundIP')]"
					},
					"virtualNetworkAddressPrefix": {
						"value": "[parameters('virtualNetworkAddressPrefix')]"
					}
				}
			}
		},
		{
			"condition": "[equals(parameters('DeployJumpBox'), 'yes')]",
			"name": "DeployJumpBox",
			"apiVersion": "2017-05-10",
			"type": "Microsoft.Resources/deployments",
			"resourceGroup": "[variables('vnetrg')]",
			"dependsOn": [
				"Microsoft.Resources/deployments/deployVNet"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('deployJumpBoxURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"addressPrefix": {
						"value": "[parameters('virtualNetworkAddressPrefix')]"
					},
					"subnetPrefix": {
						"value": "[parameters('mgmtSubnetPrefix')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"subnetName": {
						"value": "[parameters('mgmtSubnetName')]"
					},
					"vmSku": {
						"value": "Standard_A1"
					},
					"windowsOSVersion": {
						"value": "2016-Datacenter"
					},
					"vmssName": {
						"value": "newvmss"
					},
					"adminUsername": {
						"value": "[parameters('username')]"
					},
					"adminPassword": {
						"value": "[parameters('password')]"
					}
				}
			}
		},
		{
			"apiVersion": "2017-05-10",
			"name": "DeployVnet",
			"type": "Microsoft.Resources/deployments",
			"resourceGroup": "[variables('vnetrg')]",
			"dependsOn": [
				"Microsoft.Resources/deployments/deployNsg"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('vnetURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"nsgName": {
						"value": "[parameters('networkSecurityGroupName')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"virtualNetworkAddressPrefix": {
						"value": "[parameters('virtualNetworkAddressPrefix')]"
					},
					"mgmtSubnetName": {
						"value": "[parameters('mgmtSubnetName')]"
					},
					"untrustSubnetName": {
						"value": "[parameters('untrustSubnetName')]"
					},
					"ipFirewalluntrustSubnetName": {
						"value": "[parameters('ipFirewalluntrustSubnetName')]"
					},
					"ipFirewalltrustSubnetName": {
						"value": "[parameters('ipFirewalltrustSubnetName')]"
					},
					"trustSubnetName": {
						"value": "[parameters('trustSubnetName')]"
					},
					"loadBalancerIP": {
						"value": "[parameters('loadBalancerIP')]"
					},
					"appGwUntrustSubnetName": {
						"value": "[parameters('appGwUntrustSubnetName')]"
					},
					"appGwTrustSubnetName": {
						"value": "[parameters('appGwTrustSubnetName')]"
					},
					"AppGWSubnetName": {
						"value": "[parameters('appGatewaySubnetName')]"
					},
					"mgmtSubnetPrefix": {
						"value": "[parameters('mgmtSubnetPrefix')]"
					},
					"untrustSubnetPrefix": {
						"value": "[parameters('untrustSubnetPrefix')]"
					},
					"trustSubnetPrefix": {
						"value": "[parameters('trustSubnetPrefix')]"
					},
					"ipFirewalluntrustSubnetPrefix": {
						"value": "[parameters('ipFirewalluntrustSubnetPrefix')]"
					},
					"ipFirewalltrustSubnetPrefix": {
						"value": "[parameters('ipFirewalltrustSubnetPrefix')]"
					},
					"appGwTrustSubnetPrefix": {
						"value": "[parameters('appGwTrustSubnetPrefix')]"
					},
					"appGwUntrustSubnetPrefix": {
						"value": "[parameters('appGwUntrustSubnetPrefix')]"
					},
					"AppGWSubnetPrefix": {
						"value": "[parameters('AppGWSubnetPrefix')]"
					}
				}
			}
		},
		{
			"condition": "[equals(parameters('deployEgressFirewall'), 'yes')]",
			"name": "DeployEgressFWLoadBalancer",
			"type": "Microsoft.Resources/deployments",
			"resourceGroup": "[variables('egressfwrg')]",
			"apiVersion": "2017-05-10",
			"dependsOn": [
				"Microsoft.Resources/deployments/deployVNet"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('deployEgressLoadBalancerURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"location": {
						"value": "[variables('location')]"
					},
					"virtualNetworkRG": {
						"value": "[variables('virtualNetworkRG')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"subnetName": {
						"value": "[parameters('trustSubnetName')]"
					},
					"loadBalancerName": {
						"value": "[variables('egressloadBalancerName')]"
					},
					"loadBalancerIP": {
						"value": "[parameters('loadBalancerIP')]"
					}
				}
			}
		},
		{
			"condition": "[equals(parameters('deployEgressFirewall'), 'yes')]",
			"name": "deployEgressFirewall",
			"resourceGroup": "[variables('egressfwrg')]",
			"type": "Microsoft.Resources/deployments",
			"apiVersion": "2017-05-10",
			"dependsOn": [
				"Microsoft.Resources/deployments/deployVNet",
				"Microsoft.Resources/deployments/DeployEgressFWLoadBalancer"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('deployEgressFirewallURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"location": {
						"value": "[variables('location')]"
					},
					"baseUrl": {
						"value": "[variables('baseUrl')]"
					},
					"virtualMachineName": {
						"value": "[concat('EgressFw-', parameters('firewallVmName'))]"
					},
					"virtualNetworkRG": {
						"value": "[variables('virtualNetworkRG')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"mgmtSubnetName": {
						"value": "[parameters('mgmtSubnetName')]"
					},
					"trustSubnetName": {
						"value": "[parameters('trustSubnetName')]"
					},
					"untrustSubnetName": {
						"value": "[parameters('untrustSubnetName')]"
					},
					"loadBalancerName": {
						"value": "[variables('egressloadBalancerName')]"
					},
					"vmSize": {
						"value": "[parameters('firewallVmSize')]"
					},
					"imageSku": {
						"value": "[parameters('firewallModel')]"
					},
					"adminUsername": {
						"value": "[parameters('username')]"
					},
					"adminPassword": {
						"value": "[parameters('password')]"
					},
					"customDataField": {
						"value": "[variables('EgressFwcustomDataField')]"
					}
				}
			}
		},
		{
			"condition": "[equals(parameters('Deployipfw'), 'yes')]",
			"name": "deployIPFirewall",
			"resourceGroup": "[variables('ipfwrg')]",
			"type": "Microsoft.Resources/deployments",
			"apiVersion": "2017-05-10",
			"dependsOn": [
				"Microsoft.Resources/deployments/deployVNet",
				"Microsoft.Resources/deployments/deployIPFWLoadBalancer"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('deployInboundFirewallURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"loadBalancerSku": {
						"value": "[variables('ipFirewallinboundLoadBalancerSku')]"
					},
					"location": {
						"value": "[variables('location')]"
					},
					"baseUrl": {
						"value": "[variables('baseUrl')]"
					},
					"vmSize": {
						"value": "[parameters('firewallVmSize')]"
					},
					"imageSku": {
						"value": "[parameters('firewallModel')]"
					},
					"virtualNetworkRG": {
						"value": "[variables('virtualNetworkRG')]"
					},
					"virtualMachineName": {
						"value": "[concat('IPFirewall-', parameters('firewallVmName'))]"
					},
					"adminUsername": {
						"value": "[parameters('username')]"
					},
					"adminPassword": {
						"value": "[parameters('password')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"mgmtSubnetName": {
						"value": "[parameters('mgmtSubnetName')]"
					},
					"untrustSubnetName": {
						"value": "[parameters('ipFirewalluntrustSubnetName')]"
					},
					"trustSubnetName": {
						"value": "[parameters('ipFirewalltrustSubnetName')]"
					},
					"loadBalancerName": {
						"value": "[variables('ipFwLoadBalancerName')]"
					},
					"customDataField": {
						"value": "[variables('IpFwcustomDataField')]"
					}
				}
			}
		},
		{
			"condition": "[equals(parameters('Deployipfw'), 'yes')]",
			"name": "deployIPFWLoadBalancer",
			"resourceGroup": "[variables('ipfwrg')]",
			"type": "Microsoft.Resources/deployments",
			"apiVersion": "2017-05-10",
			"dependsOn": [
				"Microsoft.Resources/deployments/deployVNet"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('DeployIPLoadBalancerURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"loadBalancerSku": {
						"value": "[variables('ipLoadBalancerSku')]"
					},
					"location": {
						"value": "[variables('location')]"
					},
					"virtualNetworkRG": {
						"value": "[variables('virtualNetworkRG')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"subnetName": {
						"value": "[parameters('ipFirewalluntrustSubnetName')]"
					},
					"loadBalancerName": {
						"value": "[variables('ipFwLoadBalancerName')]"
					},
					"loadBalancerIP": {
						"value": "[parameters('ipFwLoadBalancerIP')]"
					}
				}
			}
		},
		{
			"condition": "[equals(parameters('deployAppGwFirewall'), 'yes')]",
			"name": "DeployAppGwFirewall",
			"resourceGroup": "[variables('appgwfwrg')]",
			"type": "Microsoft.Resources/deployments",
			"apiVersion": "2017-05-10",
			"dependsOn": [
				"Microsoft.Resources/deployments/deployVNet"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('DeployAppGwFirewallURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"location": {
						"value": "[variables('location')]"
					},
					"baseUrl": {
						"value": "[variables('baseUrl')]"
					},
					"virtualMachineName": {
						"value": "[concat('AppGwFw-', parameters('firewallVmName'))]"
					},
					"vmSize": {
						"value": "[parameters('firewallVmSize')]"
					},
					"imageSku": {
						"value": "[parameters('firewallModel')]"
					},
					"virtualNetworkRG": {
						"value": "[variables('virtualNetworkRG')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"adminUsername": {
						"value": "[parameters('username')]"
					},
					"adminPassword": {
						"value": "[parameters('password')]"
					},
					"mgmtSubnetName": {
						"value": "[parameters('mgmtSubnetName')]"
					},
					"untrustSubnetName": {
						"value": "[parameters('appGwUntrustSubnetName')]"
					},
					"trustSubnetName": {
						"value": "[parameters('appGwTrustSubnetName')]"
					},
					"loadBalancerName": {
						"value": "[variables('appGatewayName')]"
					},
					"customDataField": {
						"value": "[variables('AppFwcustomDataField')]"
					}
				}
			}
		},
		{
			"condition": "[equals(parameters('DeployAppGwFirewall'), 'yes')]",
			"name": "SetupPublicLoadBalancer",
			"resourceGroup": "[variables('appgwfwrg')]",
			"type": "Microsoft.Resources/deployments",
			"apiVersion": "2017-05-10",
			"dependsOn": [
				"Microsoft.Resources/deployments/DeployVnet",
				"Microsoft.Resources/deployments/DeployAppGwFirewall"
			],
			"properties": {
				"mode": "Incremental",
				"templateLink": {
					"uri": "[variables('DeployAppGwlbURL')]",
					"contentVersion": "1.0.0.0"
				},
				"parameters": {
					"lbName": {
						"value": "[parameters('appGatewayName')]"
					},
					"publicIPAddressName": {
						"value": "[parameters('appGatewayDnsName')]"
					},
					"virtualNetworkName": {
						"value": "[parameters('virtualNetworkName')]"
					},
					"subnetName": {
						"value": "[parameters('appGatewaySubnetName')]"
					},

					"virtualNetworkRG": {
						"value": "[variables('virtualNetworkRG')]"
					}
				}
			}
		}
	],
	"outputs": {}
}