[ARM] az stack: Add new commands for deployment stacks

src/azure-cli-core/azure/cli/core/profiles/_shared.py

@@ -60,6 +60,7 @@ class ResourceType(Enum):  # pylint: disable=too-few-public-methods
     MGMT_RESOURCE_SUBSCRIPTIONS = ('azure.mgmt.resource.subscriptions', 'SubscriptionClient')
     MGMT_RESOURCE_DEPLOYMENTSCRIPTS = ('azure.mgmt.resource.deploymentscripts', 'DeploymentScriptsClient')
     MGMT_RESOURCE_TEMPLATESPECS = ('azure.mgmt.resource.templatespecs', 'TemplateSpecsClient')
+    MGMT_RESOURCE_DEPLOYMENTSTACKS = ('azure.mgmt.resource.deploymentstacks', 'DeploymentStacksClient')
     MGMT_RESOURCE_PRIVATELINKS = ('azure.mgmt.resource.privatelinks', 'ResourcePrivateLinkClient')
     MGMT_RESOURCE_MANAGEDAPPLICATIONS = ('azure.mgmt.resource.managedapplications', 'ApplicationClient')
     MGMT_MONITOR = ('azure.mgmt.monitor', 'MonitorManagementClient')
@@ -175,11 +176,14 @@ def default_api_version(self):
         ResourceType.MGMT_RESOURCE_FEATURES: '2021-07-01',
         ResourceType.MGMT_RESOURCE_LINKS: '2016-09-01',
         ResourceType.MGMT_RESOURCE_LOCKS: '2016-09-01',
-        ResourceType.MGMT_RESOURCE_POLICY: '2021-06-01',
+        ResourceType.MGMT_RESOURCE_POLICY: SDKProfile('2021-06-01', {
+            'policy_exemptions': '2020-07-01-preview'
+        }),
         ResourceType.MGMT_RESOURCE_RESOURCES: '2022-09-01',
         ResourceType.MGMT_RESOURCE_SUBSCRIPTIONS: '2019-11-01',
         ResourceType.MGMT_RESOURCE_DEPLOYMENTSCRIPTS: '2020-10-01',
         ResourceType.MGMT_RESOURCE_TEMPLATESPECS: '2021-05-01',
+        ResourceType.MGMT_RESOURCE_DEPLOYMENTSTACKS: '2022-08-01-preview',
         ResourceType.MGMT_RESOURCE_PRIVATELINKS: '2020-05-01',
         ResourceType.MGMT_RESOURCE_MANAGEDAPPLICATIONS: '2019-07-01',
         ResourceType.MGMT_NETWORK_DNS: '2018-05-01',

src/azure-cli/azure/cli/command_modules/resource/_client_factory.py

@@ -64,6 +64,12 @@ def _resource_templatespecs_client_factory(cli_ctx, **_):
     return get_mgmt_service_client(cli_ctx, ResourceType.MGMT_RESOURCE_TEMPLATESPECS)
 
 
+def _resource_deploymentstacks_client_factory(cli_ctx, **_):
+    from azure.cli.core.commands.client_factory import get_mgmt_service_client
+    from azure.cli.core.profiles import ResourceType
+    return get_mgmt_service_client(cli_ctx, ResourceType.MGMT_RESOURCE_DEPLOYMENTSTACKS)
+
+
 def _resource_privatelinks_client_factory(cli_ctx, **_):
     from azure.cli.core.commands.client_factory import get_mgmt_service_client
     from azure.cli.core.profiles import ResourceType
@@ -158,6 +164,10 @@ def cf_resource_templatespecs(cli_ctx, _):
     return _resource_templatespecs_client_factory(cli_ctx).template_specs
 
 
+def cf_resource_deploymentstacks(cli_ctx, _):
+    return _resource_deploymentstacks_client_factory(cli_ctx).deployment_stacks
+
+
 def cf_resource_privatelinkassociations(cli_ctx, _):
     return _resource_privatelinks_client_factory(cli_ctx).private_link_association
 

src/azure-cli/azure/cli/command_modules/resource/_help.py

@@ -2840,6 +2840,213 @@
 short-summary: List out all available versions of Bicep CLI.
 """
 
+helps['stack'] = """
+type: group
+short-summary: A deployment stack is a native Azure resource type that enables you to perform operations on a resource collection as an atomic unit.
+long-summary: Deployment stacks are defined in ARM as the type Microsoft.Resources/deploymentStacks.
+"""
+
+helps['stack mg'] = """
+type: group
+short-summary: Manage Deployment Stacks at management group.
+"""
+
+helps['stack mg create'] = """
+type: command
+short-summary: Create or update a deployment stack at management group scope
+examples:
+  - name: Create a deployment stack using template file.
+    text: az stack mg create --name StackName --management-group-id myMg --template-file simpleTemplate.json --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack with parameter file and delete resources.
+    text: az stack mg create --name StackName --management-group-id myMg --delete-resources --template-file simpleTemplate.json --parameters simpleTemplateParams.json --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack with template spec and delete resource groups
+    text: az stack mg create --name StackName --management-group-id myMg --delete-resource-groups --template-spec TemplateSpecResourceIDWithVersion --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack using bicep file and delete all resources.
+    text: az stack mg create --name StackName --management-group-id myMg --delete-all --template-file simple.bicep --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack using parameters from key/value pairs
+    text: az stack mg create --name StackName --management-group-id myMg --template-file simpleTemplate.json --location westus --description description --parameters simpleTemplateParams.json value1=foo value2=bar --deny-settings-mode None
+  - name: Create a deployment stack from a local template, using a parameter file, a remote parameter file, and selectively overriding key/value pairs.
+    text: az stack mg create --name StackName --management-group-id myMg --template-file azuredeploy.json --parameters @params.json --parameters https://mysite/params.json --parameters MyValue=This MyArray=@array.json --location westus --deny-settings-mode None
+  - name: Create a deployment stack from a local template, using deny settings.
+    text: az stack mg create --name StackName --management-group-id myMg --template-file azuredeploy.json --deny-settings-mode denyDelete --deny-settings-excluded-actions Microsoft.Compute/virtualMachines/write --deny-settings-excluded-principals "test1 test2" --location westus --deny-settings-mode None
+  - name: Create a deployment stack from a local template, apply deny settings to child scope.
+    text: az stack mg create --name StackName --management-group-id myMg --template-file azuredeploy.json --deny-settings-mode denyDelete --deny-settings-excluded-actions Microsoft.Compute/virtualMachines/write --deny-settings-apply-to-child-scopes --location westus
+"""
+
+helps['stack mg list'] = """
+type: command
+short-summary: List all deployment stacks in management group
+examples:
+  - name: List all stacks
+    text: az stack mg list --management-group-id myMg
+"""
+
+helps['stack mg show'] = """
+type: command
+short-summary: Get specified deployment stack from management group scope
+examples:
+  - name: Get stack by name.
+    text: az stack mg show --name StackName --management-group-id myMg
+  - name: Get stack by stack resource id.
+    text: az stack mg show --id /providers/Microsoft.Management/managementGroups/myMg/providers/Microsoft.Resources/deploymentStacks/StackName --management-group-id myMg
+"""
+
+helps['stack mg export'] = """
+type: command
+short-summary: Export the template used to create the deployment stack
+examples:
+  - name: Export template by name.
+    text: az stack mg export --name StackName --management-group-id myMg
+  - name: Export template by stack resource id.
+    text: az stack mg export --id /providers/Microsoft.Management/managementGroups/myMg/providers/Microsoft.Resources/deploymentStacks/StackName --management-group-id myMg
+"""
+
+helps['stack mg delete'] = """
+type: command
+short-summary: Delete specified deployment stack from management group scope
+examples:
+  - name: Delete stack by name.
+    text: az stack mg delete --name StackName --management-group-id myMg
+  - name: Delete stack by stack resource id.
+    text: az stack mg delete --id /providers/Microsoft.Management/managementGroups/myMg/providers/Microsoft.Resources/deploymentStacks/StackName --management-group-id myMg
+"""
+
+helps['stack sub'] = """
+type: group
+short-summary: Manage Deployment Stacks at subscription.
+"""
+
+helps['stack sub create'] = """
+type: command
+short-summary: Create or update a deployment stack at subscription scope
+examples:
+  - name: Create a deployment stack using template file.
+    text: az stack sub create --name StackName --template-file simpleTemplate.json --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack with parameter file and delete resources.
+    text: az stack sub create --name StackName --delete-resources --template-file simpleTemplate.json --parameters simpleTemplateParams.json --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack with template spec and delete resource groups
+    text: az stack sub create --name StackName --delete-resource-groups --template-spec TemplateSpecResourceIDWithVersion --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack using bicep file and delete all resources.
+    text: az stack sub create --name StackName --delete-all --template-file simple.bicep --location westus2 --description description --deny-settings-mode None
+  - name: Create a deployment stack at a different subscription.
+    text: az stack sub create --name StackName --template-file simpleTemplate.json --location westus2 --description description --subscription subscriptionId --deny-settings-mode None
+  - name: Create a deployment stack and deploy at the resource group scope.
+    text: az stack sub create --name StackName --template-file simpleTemplate.json --location westus --deployment-resource-group ResourceGroup --description description --deny-settings-mode None
+  - name: Create a deployment stack using parameters from key/value pairs
+    text: az stack sub create --name StackName --template-file simpleTemplate.json --location westus --description description --parameters simpleTemplateParams.json value1=foo value2=bar --deny-settings-mode None
+  - name: Create a deployment stack from a local template, using a parameter file, a remote parameter file, and selectively overriding key/value pairs.
+    text: az stack sub create --name StackName --template-file azuredeploy.json --parameters @params.json --parameters https://mysite/params.json --parameters MyValue=This MyArray=@array.json --location westus --deny-settings-mode None
+  - name: Create a deployment stack from a local template, using deny settings.
+    text: az stack sub create --name StackName --template-file azuredeploy.json --deny-settings-mode denyDelete --deny-settings-excluded-actions Microsoft.Compute/virtualMachines/write --deny-settings-excluded-principals "test1 test2" --location westus --deny-settings-mode None
+  - name: Create a deployment stack from a local template, apply deny settings to child scopes.
+    text: az stack sub create --name StackName --template-file azuredeploy.json --deny-settings-mode denyDelete --deny-settings-excluded-actions Microsoft.Compute/virtualMachines/write --deny-settings-apply-to-child-scopes --location westus --deny-settings-mode None
+"""
+
+helps['stack sub list'] = """
+type: command
+short-summary: List all deployment stacks in subscription
+examples:
+  - name: List all stacks
+    text: az stack sub list
+"""
+
+helps['stack sub show'] = """
+type: command
+short-summary: Get specified deployment stack from subscription scope
+examples:
+  - name: Get stack by name.
+    text: az stack sub show --name StackName
+  - name: Get stack by stack resource id.
+    text: az stack sub show --id /subscriptions/111111111111/providers/Microsoft.Resources/deploymentStacks/StackName
+"""
+
+helps['stack sub export'] = """
+type: command
+short-summary: Export the template used to create the deployment stack
+examples:
+  - name: Export template by name.
+    text: az stack sub export --name StackName
+  - name: Export template by stack resource id.
+    text: az stack sub export --id /subscriptions/111111111111/providers/Microsoft.Resources/deploymentStacks/StackName
+"""
+
+helps['stack sub delete'] = """
+type: command
+short-summary: Delete specified deployment stack from subscription scope
+examples:
+  - name: Delete stack by name.
+    text: az stack sub delete --name StackName
+  - name: Delete stack by stack resource id.
+    text: az stack sub delete --id /subscriptions/111111111111/providers/Microsoft.Resources/deploymentStacks/StackName
+"""
+
+helps['stack group'] = """
+type: group
+short-summary: Manage Deployment Stacks at resource group.
+"""
+
+helps['stack group create'] = """
+type: command
+short-summary: Create or update a deployment stack at resource group scope
+examples:
+  - name: Create a deployment stack using template file and delete resources.
+    text: az stack group create --name StackName --resource-group ResourceGroup --delete-resources --template-file simpleTemplate.json --description description --deny-settings-mode None
+  - name: Create a deployment stack with parameter file and delete resource groups.
+    text: az stack group create --name StackName --resource-group ResourceGroup --delete-resource-groups --template-file simpleTemplate.json --parameters simpleTemplateParams.json --description description --deny-settings-mode None
+  - name: Create a deployment stack with template spec and delete all resources
+    text: az stack group create --name StackName --resource-group ResourceGroup --delete-all --template-spec TemplateSpecResourceIDWithVersion --description description --deny-settings-mode None
+  - name: Create a deployment stack using bicep file.
+    text: az stack group create --name StackName --resource-group ResourceGroup --template-file simple.bicep --description description --deny-settings-mode None
+  - name: Create a deployment stack at a different subscription
+    text: az stack group create --name StackName --resource-group ResourceGroup --template-file simpleTemplate.json --description description --subscription subscriptionId --deny-settings-mode None
+  - name: Create a deployment stack using parameters from key/value pairs
+    text: az stack group create --name StackName --template-file simpleTemplate.json --resource-group ResourceGroup --description description --parameters simpleTemplateParams.json value1=foo value2=bar --deny-settings-mode None
+  - name: Create a deployment stack from a local template, using a parameter file, a remote parameter file, and selectively overriding key/value pairs.
+    text: az stack group create --name StackName --template-file azuredeploy.json --parameters @params.json --parameters https://mysite/params.json --parameters MyValue=This MyArray=@array.json --resource-group ResourceGroup --deny-settings-mode None
+  - name: Create a deployment stack from a local template, using deny settings.
+    text: az stack group create --name StackName --resource-group ResourceGroup --template-file azuredeploy.json --deny-settings-mode denyDelete --deny-settings-excluded-actions Microsoft.Compute/virtualMachines/write --deny-settings-excluded-principals "test1 test2" --deny-settings-mode None
+  - name: Create a deployment stack from a local template, apply deny setting to child scopes.
+    text: az stack group create --name StackName --resource-group ResourceGroup --template-file azuredeploy.json --deny-settings-mode denyDelete --deny-settings-excluded-actions Microsoft.Compute/virtualMachines/write --deny-settings-apply-to-child-scopes
+"""
+
+helps['stack group list'] = """
+type: command
+short-summary: List all deployment stacks in resource group
+examples:
+  - name: List all stacks in resource group
+    text: az stack group list --resource-group ResourceGroup
+"""
+
+helps['stack group show'] = """
+type: command
+short-summary: Get specified deployment stack from resource group scope
+examples:
+  - name: Get stack by name.
+    text: az stack group show --name StackName --resource-group ResourceGroup
+  - name: Get stack by stack resource id.
+    text: az stack group show --id /subscriptions/111111111111/resourceGroups/ResourceGroup/providers/Microsoft.Resources/deploymentStacks/StackName
+"""
+
+helps['stack group export'] = """
+type: command
+short-summary: Export the template used to create the deployment stack from resource group scope
+examples:
+  - name: Export template by name.
+    text: az stack group export --name StackName --resource-group ResourceGroup
+  - name: Export template by stack resource id.
+    text: az stack group export --id /subscriptions/111111111111/resourceGroups/ResourceGroup/providers/Microsoft.Resources/deploymentStacks/StackName
+"""
+
+helps['stack group delete'] = """
+type: command
+short-summary: Delete specified deployment stack from resource group scope
+examples:
+  - name: Delete stack by name.
+    text: az stack group delete --name StackName --resource-group ResourceGroup
+  - name: Delete stack by stack resource id.
+    text: az stack group delete --id /subscriptions/111111111111/resourceGroups/ResourceGroup/providers/Microsoft.Resources/deploymentStacks/StackName
+"""
+
 helps['bicep generate-params'] = """
 type: command
 short-summary: Generate parameters file for a Bicep file.