canada-ca / accelerators_accelerateurs-azure

[AZURE] Tools and templates to accelerate GC service delivery. Outils et modèles pour accélérer la prestation de services du GC.

(Français)

Azure Landing Zones for Canadian Public Sector

Microsoft Canada has open-sourced Azure Landing Zone for Canadian Public Sector in GitHub. This is a purpose-built reference implementation to guide government departments to be compliant with Canadian standards and achieve Authority to Operate approval faster. This implementation is based on Cloud Adoption Framework for Azure and provides an opinionated implementation that enables ITSG-33 regulatory compliance by using NIST SP 800-53 Rev. 4 and Canada Federal PBMM Regulatory Compliance Policy Sets.

See Wiki for more information on the architecture, 30 day guardrail guidance & deployment instructions.

Deployment to Azure is supported using Azure DevOps Pipelines and can be adapted for other automated deployment systems like GitHub Actions, Jenkins, etc.

The automation is built with Project Bicep and Azure Resource Manager template.

How to Contribute

See CONTRIBUTING.md

License

Unless otherwise noted, the source code of this project is covered under Crown Copyright, Government of Canada, and is distributed under the MIT License.

The Canada wordmark and related graphics associated with this distribution are protected under trademark law and copyright law. No permission is granted to use them outside the parameters of the Government of Canada's corporate identity program. For more information, see Federal identity requirements.

---

GC Accelerateurs (Azure)

Outils et modèles pour accélérer la prestation de services du GC dans Azure.

Comment contribuer

Voir CONTRIBUTING.md

Licence

Sauf indication contraire, le code source de ce projet est protégé par le droit d'auteur de la Couronne du gouvernement du Canada et distribué sous la licence MIT.

Le mot-symbole « Canada » et les éléments graphiques connexes liés à cette distribution sont protégés en vertu des lois portant sur les marques de commerce et le droit d'auteur. Aucune autorisation n'est accordée pour leur utilisation à l'extérieur des paramètres du programme de coordination de l'image de marque du gouvernement du Canada. Pour obtenir davantage de renseignements à ce sujet, veuillez consulter les Exigences pour l'image de marque.

accelerators_accelerateurs-azure's Issues

msfirewall/demo-temporary-jumpbox: Template password parameter not working

I just deployed the msfirewall/demo-temporary-jumpbox template.
I have replaced the adminPassword paramater in the deploy-60-servers.parameters.json parameter file beforehand.
I was not able to RDP into the jumpbox due to rejected creds.
I have reset the password in the portal for now and was able to RDP.
Just wanted to track this issue in case it happens to other users.

Thanks

Chadi

DevelopmentVM: VS Code not linked to accelerators repo by default

Hi! Accoring to the vid, the accelerators_accelerateurs-azure repo should be linked automatically into VSCode when deploying the DevelopmentVM template.

My instance did not have it linked (blank instance of VS Code). The Git plugin was installed however, so it wasn't too difficult to add the accelerators_accelerateurs-azure repo and open it up.

Process for developing a Python-based, non-sensitive-info, app on Azure

Hi there,

I'm a Coordinator at the Canadian Centre for Climate Services, Environment and Climate Change Canada. In support of GoC's rapidly accelerating climate adaptation strategies, we are working to develop decision support tools that assist Canadians in integrating climate change information into their risk-based decision making.

One avenue we are exploring is through web-based decision support tool/guidance frameworks. To this end, we have developed a prototype (currently) Python Notebook-based app (hosted in Github, happy to share link to this private repo with an appropriate Accelerator developer, if requested). I would like to explore hosting of this app - which contains no reference to any sensitive or non-public information - on a cloud provider site. I have fairly extensive previous experience with cloud-based workflows (particularly IaaS). I wonder if I could get in touch with a relevant Accelerator contact to discuss the process for the above initiative? Please reply to @JeremyFyke or reach out directly via email.

Jeremy

Use DSC and Chocolaty for tools setup

Noticed that the tools are currently hardcoded (and out of date because VSCode moves quickly). There is instructions here for using DSC and chocolaty to install stuff like Git/VS Code https://docs.microsoft.com/en-us/azure/automation/automation-dsc-cd-chocolatey

Microsoft released NIST 800-53 templates

FYI, https://azure.microsoft.com/en-ca/blog/new-azure-blueprint-simplifies-compliance-with-nist-sp-800-53/ since that is close to ITSG-33