Resource Model
VM Resource Group
Section titled “VM Resource Group”Contains:
- VNet and VM subnet.
- NSG and NIC.
- Optional VM public IP only when enabled.
- SQL Server VM.
AzureBastionSubnet.- Bastion public IP.
- Azure Bastion host.
Storage Resource Group
Section titled “Storage Resource Group”Contains:
- Key Vault.
- Storage account.
- Azure Files share.
The separate storage group lets you remove the VM lab while keeping storage and secrets when needed.
Names are derived from resourceGroup.name in the current script:
<resourceGroup.name>-vnet<resourceGroup.name>-subnet<resourceGroup.name>-nsg<resourceGroup.name>-nic<resourceGroup.name>-vm<resourceGroup.name>-bastion<resourceGroup.name>-bastion-pip<resourceGroup.name>-pipwhen VM public IP is enabled
Key Vault and storage names come directly from config because they must be globally unique.