Configuration

Start from the sample:

Copy-Item .\config.yaml .\config.local.yaml

Then edit config.local.yaml.

Required Edits

Replace placeholder values for:

• resourceGroup.name
• keyVault.name
• storage.resourceGroup
• storage.accountName
• storage.fileShareName
• credentials.username

Safe Network Baseline

Keep the VM private:

network:
  publicIp:
    enabled: false

securityRules: []

Use Azure Bastion for RDP access.

Secrets

Do not put passwords in YAML. Store the VM admin password in Key Vault under keyVault.vmAdminPasswordSecretName, or use -GeneratePassword only for disposable labs.

Guest Scripts

softwareInstalls.installScript and softwareInstalls.logonScript are trusted PowerShell inputs. Review them before deployment.