windows2019.json

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
      "mofUrl":{
          "type": "string"
      },
      "identityId": {
        "type": "string"
      },
      "galleryName": {
        "type": "string"
      },
      "workspaceName": {
        "type": "string"
      },
      "imageTemplateName": {
        "type": "string"
      },
      "powerStigVersion": {
        "type": "string"
      },
      "stigVersion" : {
        "type": "string"
      },
      "osVersion" : {
        "type": "string"
      }, 
      "osRole": {
        "type": "string"
      }
    },
    "variables": {
      "setPowerStigUrl": "https://raw.githubusercontent.com/shawngib/project-stig/main/scripts/setPowerStignoaudit.ps1",
      "setAuditingStigUrl": "https://raw.githubusercontent.com/shawngib/project-stig/main/scripts/auditStig.ps1",
      "wsResourceId": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/',resourceGroup().name, '/providers/','Microsoft.OperationalInsights/workspaces/', parameters('workspaceName'))]"
    },
    "resources": [
      {
        "name": "[parameters('imageTemplateName')]",
        "type": "Microsoft.VirtualMachineImages/imageTemplates",
        "apiVersion": "2020-02-14",
        "location": "[resourceGroup().location]",
        "dependsOn": [
          
        ],
        "tags": {
          "imagebuilderTemplate": "AzureImageBuilderSIG",
          "userIdentity": "enabled"
        },
        "identity": {
          "type": "UserAssigned",
          "userAssignedIdentities": {
            "[resourceID('Microsoft.ManagedIdentity/userAssignedIdentities/',parameters('identityId'))]": {
              
            }
          }
        },
        "properties": {
          "buildTimeoutInMinutes": 100,
          "vmProfile": {
            "vmSize": "Standard_D8_v5",
            "osDiskSizeGB": 127
          },
          "source": {
            "type": "PlatformImage",
            "publisher": "MicrosoftWindowsServer",
            "offer": "WindowsServer",
            "sku": "2019-datacenter-gensecond",
            "version": "latest"
          },
          "customize": [
            {
                "type": "PowerShell",
                "name": "setEnvVariables",
                "inline": [
                  "[concat('[System.Environment]::SetEnvironmentVariable(''WORKSPACE_ID'',''',reference(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspaceName')),'2017-03-15-preview').customerId,''',[System.EnvironmentVariableTarget]::Machine)')]",
                  "[concat('[System.Environment]::SetEnvironmentVariable(''WORKSPACE_KEY'',''',listKeys(variables('wsResourceId'), '2015-11-01-preview').primarySharedKey,''', [System.EnvironmentVariableTarget]::Machine)')]",
                  "[concat('[System.Environment]::SetEnvironmentVariable(''POWERSTIG_VER'',''',parameters('powerStigVersion'),''', [System.EnvironmentVariableTarget]::Machine)')]",
                  "[concat('[System.Environment]::SetEnvironmentVariable(''STIG_OSVER'',''',parameters('osVersion'),''', [System.EnvironmentVariableTarget]::Machine)')]",
                  "[concat('[System.Environment]::SetEnvironmentVariable(''STIG_OSROLE'',''',parameters('osRole'),''', [System.EnvironmentVariableTarget]::Machine)')]",
                  "[concat('[System.Environment]::SetEnvironmentVariable(''STIG_VER'',''',parameters('stigVersion'),''', [System.EnvironmentVariableTarget]::Machine)')]"
                ]
            },
            {
              "type": "PowerShell",
              "name": "addFeatures",
              "inline": [
                "[if(contains(parameters('osRole'), 'DC'),'Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools','get-windowsfeature')]"
              ]
            },
            {
              "type": "File",
              "name": "mofFileDownload",
              "sourceUri": "[parameters('mofUrl')]",
              "destination": "c:\\localhost.mof"
            },
            {
              "type": "File",
              "name": "AuditScriptDownload",
              "sourceUri": "[variables('setAuditingStigUrl')]",
              "destination": "c:\\auditStig.ps1"
            },
            {
              "type": "PowerShell",
              "name": "SetUpPowerStig",
              "runElevated": true,
              "scriptUri": "[variables('setPowerStigUrl')]"
            },            
            {
              "type": "WindowsUpdate",
              "searchCriteria": "IsInstalled=0",
              "filters": [
                "exclude:$_.Title -like '*Preview*'",
                "include:$true"
              ],
              "updateLimit": 40
            },
            {
              "type": "WindowsRestart",
              "restartCommand": "shutdown /r /f /t 0",
              "restartCheckCommand": "echo Azure-Image-Builder-Restarted-the-VM  > c:\\azureImageBuilderRestart.txt",
              "restartTimeout": "2h"
            }
          ],
          "distribute": [
            {
              "type": "SharedImage",
              "galleryImageId": "[concat(resourceGroup().id,'/providers/Microsoft.Compute/galleries/',parameters('galleryName'),'/images/',parameters('imageTemplateName'),'/versions/',parameters('stigVersion'),'.1')]",
              "runOutputName": "[parameters('imageTemplateName')]",
              "artifactTags": {
                "source": "azureVmImageBuilder",
                "baseosimg": "WindowsServer"
              },
              "replicationRegions": [
                "eastus",
                "eastus2",
                "southcentralus"
              ]
            },
            {
              "type": "VHD",
              "runOutputName": "Win2019gen2_STIG_V2R4"
            }
          ]
        }
      }
    ]
  }