Troubleshooting
Missing powershell-yaml
Section titled “Missing powershell-yaml”Install it:
Install-Module -Name powershell-yaml -Scope CurrentUser -ForceNo Azure Context
Section titled “No Azure Context”Real deployment requires:
Connect-AzAccount-Plan does not require Azure sign-in.
Missing VM Password Secret
Section titled “Missing VM Password Secret”Create the secret in Key Vault before deploying, or use -GeneratePassword for a disposable lab.
Legacy Key Vault Access Policies
Section titled “Legacy Key Vault Access Policies”The script rejects existing Key Vaults that do not use RBAC authorization. Use a different vault name or migrate the vault.
Broad RDP Or SQL Rule Rejected
Section titled “Broad RDP Or SQL Rule Rejected”Validation rejects inbound 3389 and 1433 from broad sources. Keep Bastion-only access or restrict the source prefix.
Local Checks
Section titled “Local Checks”Run:
.\scripts\Test-Local.ps1 -ConfigFile .\config.local.yaml