Private/Tests/Cleanup/Remove-AvmBicepResourceRemainder.ps1

function Remove-AvmBicepResourceRemainder {

    [CmdletBinding(SupportsShouldProcess)]
    param (
        [Parameter(Mandatory = $true)]
        [string] $ResourceId,

        [Parameter(Mandatory = $true)]
        [string] $Type,

        [ValidateRange(1, 10)]
        [int] $PostRemovalRetryLimit = 3,

        [string[]] $ManagedResourceGroupIds = @(),

        [ValidateSet('', 'Enabled', 'Disabled', 'AlwaysON')]
        [string] $OriginalSoftDeleteFeatureState = '',

        # Relocation mode: purge protection or a remaining soft-deleted record blocks completion.
        [switch] $RequireCompleteRemoval
    )

    Set-StrictMode -Version 3.0
    $ErrorActionPreference = 'Stop'

    if (-not $PSCmdlet.ShouldProcess($ResourceId, 'Complete Bicep test resource cleanup')) {
        return
    }
    $restoreSoftDeleteStatus = $OriginalSoftDeleteFeatureState
    $removalRetryCount = 1
    do {
        try {
            switch ($Type) {
                'Microsoft.AppConfiguration/configurationStores' {
                    $subscriptionId = $ResourceId.Split('/')[2]
                    $resourceName = $ResourceId.Split('/')[-1]

                    $getPath = '/subscriptions/{0}/providers/Microsoft.AppConfiguration/deletedConfigurationStores?api-version=2021-10-01-preview' -f $subscriptionId
                    $softDeletedConfigurationStore = Get-AvmBicepCleanupRestCollection -Path $getPath |
                        Where-Object { $_.properties.configurationStoreId -ieq $ResourceId }

                    if ($softDeletedConfigurationStore) {

                        $purgePath = '/subscriptions/{0}/providers/Microsoft.AppConfiguration/locations/{1}/deletedConfigurationStores/{2}/purge?api-version=2021-10-01-preview' -f $subscriptionId, $softDeletedConfigurationStore.properties.location, $resourceName
                        $purgeRequestInputObject = @{
                            Method = 'POST'
                            Path   = $purgePath
                        }
                        if ($PSCmdlet.ShouldProcess(('App Configuration Store with ID [{0}]' -f $softDeletedConfigurationStore.properties.configurationStoreId), 'Purge')) {
                            Write-AvmLog -Level Info -Message "Purging App Configuration store $resourceName..."
                            $response = Invoke-AzRestMethod @purgeRequestInputObject
                            if ([int]$response.StatusCode -lt 200 -or [int]$response.StatusCode -ge 300) {
                                throw [AvmProcessException]::new([string](('Purge of resource [{0}] failed with error code [{1}]' -f $ResourceId, $response.StatusCode)))
                            }
                            Write-AvmLog -Level Info -Message "Requested purge of App Configuration store $resourceName (HTTP $($response.StatusCode))."
                        }
                    }
                    break
                }
                'Microsoft.KeyVault/vaults' {
                    $resourceName = $ResourceId.Split('/')[-1]

                    $matchingKeyVault = Get-AzKeyVault -InRemovedState | Where-Object { $_.resourceId -eq $ResourceId }
                    if ($RequireCompleteRemoval -and $matchingKeyVault -and $matchingKeyVault.EnablePurgeProtection) {
                        throw [AvmProcessException]::new("Purge-protected vault remains reserved: $ResourceId")
                    }
                    if ($matchingKeyVault -and -not $matchingKeyVault.EnablePurgeProtection) {
                        if ($PSCmdlet.ShouldProcess(('Key Vault with ID [{0}]' -f $matchingKeyVault.Id), 'Purge')) {
                            try {
                                Write-AvmLog -Level Info -Message "Purging Key Vault $resourceName..."
                                $null = Remove-AzKeyVault -ResourceId $matchingKeyVault.Id -InRemovedState -Force -Location $matchingKeyVault.Location -ErrorAction 'Stop'
                                Write-AvmLog -Level Info -Message "Requested purge of Key Vault $resourceName."
                            }
                            catch {
                                if (-not $RequireCompleteRemoval -and
                                    $_.Exception.Message -match 'purge protection (?:is )?enabled|PurgeProtectionEnabled') {
                                    Write-Warning ('Purge protection for key vault [{0}] enabled. Skipping. Scheduled purge date is [{1}]' -f $resourceName, $matchingKeyVault.ScheduledPurgeDate)
                                }
                                else {
                                    throw $_
                                }
                            }
                        }
                    }
                    break
                }
                'Microsoft.CognitiveServices/accounts' {
                    $resourceGroupName = $ResourceId.Split('/')[4]
                    $resourceName = $ResourceId.Split('/')[-1]

                    $matchingAccount = Get-AzCognitiveServicesAccount -InRemovedState |
                        Where-Object { $_.AccountName -ieq $resourceName -and $_.ResourceGroupName -ieq $resourceGroupName }
                    if ($matchingAccount) {
                        if ($PSCmdlet.ShouldProcess(('Cognitive services account with ID [{0}]' -f $matchingAccount.Id), 'Purge')) {
                            Write-AvmLog -Level Info -Message "Purging Cognitive Services account $resourceName..."
                            $null = Remove-AzCognitiveServicesAccount -InRemovedState -Force -Location $matchingAccount.Location -ResourceGroupName $resourceGroupName -Name $matchingAccount.AccountName
                            Write-AvmLog -Level Info -Message "Requested purge of Cognitive Services account $resourceName."
                        }
                    }
                    break
                }
                'Microsoft.ApiManagement/service' {
                    $subscriptionId = $ResourceId.Split('/')[2]
                    $resourceName = $ResourceId.Split('/')[-1]

                    $getPath = '/subscriptions/{0}/providers/Microsoft.ApiManagement/deletedservices?api-version=2021-08-01' -f $subscriptionId
                    $softDeletedService = Get-AvmBicepCleanupRestCollection -Path $getPath |
                        Where-Object { $_.properties.serviceId -ieq $ResourceId }

                    if ($softDeletedService) {

                        $purgePath = '/subscriptions/{0}/providers/Microsoft.ApiManagement/locations/{1}/deletedservices/{2}?api-version=2020-06-01-preview' -f $subscriptionId, $softDeletedService.location, $resourceName
                        $purgeRequestInputObject = @{
                            Method = 'DELETE'
                            Path   = $purgePath
                        }
                        if ($PSCmdlet.ShouldProcess(('API management service with ID [{0}]' -f $softDeletedService.properties.serviceId), 'Purge')) {
                            Write-AvmLog -Level Info -Message "Purging API Management service $resourceName..."
                            $response = Invoke-AzRestMethod @purgeRequestInputObject
                            if ([int]$response.StatusCode -lt 200 -or [int]$response.StatusCode -ge 300) {
                                throw [AvmProcessException]::new(
                                    "API Management purge failed with HTTP $($response.StatusCode): $ResourceId")
                            }
                            Write-AvmLog -Level Info -Message "Requested purge of API Management service $resourceName (HTTP $($response.StatusCode))."
                        }
                    }
                    break
                }
                'Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems' {

                    $vaultId = $ResourceId.Substring(
                        0, $ResourceId.IndexOf('/backupFabrics/', [System.StringComparison]::OrdinalIgnoreCase))
                    $resourceName = $ResourceId.Split('/')[-1]
                    $vault = Invoke-AvmBicepCleanupLookup -Command 'Get-AzRecoveryServicesVaultProperty' -Parameters @{
                        VaultId = $vaultId
                    }
                    if ($null -eq $vault -or -not $PSCmdlet.ShouldProcess($ResourceId, 'Remove backup data')) {
                        break
                    }
                    $softDeleteStatus = $vault.SoftDeleteFeatureState
                    if ([string]::IsNullOrEmpty($restoreSoftDeleteStatus)) {
                        $restoreSoftDeleteStatus = $softDeleteStatus
                    }
                    $changedSoftDelete = $false
                    try {
                        if ($softDeleteStatus -ne 'Disabled') {
                            $null = Set-AzRecoveryServicesVaultProperty -VaultId $vaultId -SoftDeleteFeatureState 'Disable'
                            $changedSoftDelete = $true
                        }
                        $backupItemInputObject = @{
                            BackupManagementType = 'AzureVM'
                            WorkloadType         = 'AzureVM'
                            VaultId              = $vaultId
                            Name                 = $resourceName
                        }
                        $backupItem = Invoke-AvmBicepCleanupLookup -Command 'Get-AzRecoveryServicesBackupItem' -Parameters $backupItemInputObject
                        if ($null -ne $backupItem) {
                            if ($backupItem.DeleteState -eq 'ToBeDeleted') {
                                $null = Undo-AzRecoveryServicesBackupItemDeletion -Item $backupItem -VaultId $vaultId -Force
                            }
                            $null = Disable-AzRecoveryServicesBackupProtection -Item $backupItem -VaultId $vaultId -RemoveRecoveryPoints -Force
                            Write-AvmLog -Level Info -Message "Requested removal of backup data $resourceName."
                        }
                    }
                    finally {
                        if ($changedSoftDelete -or $softDeleteStatus -ne $restoreSoftDeleteStatus) {
                            $null = Set-AzRecoveryServicesVaultProperty -VaultId $vaultId -SoftDeleteFeatureState $restoreSoftDeleteStatus.TrimEnd('d')
                        }
                    }
                    break
                }
                'Microsoft.Databricks/workspaces' {
                    $resourceGroupName = $ResourceId.Split('/')[4]
                    $resourceName = $ResourceId.Split('/')[-1]

                    $subscriptionId = $ResourceId.Split('/')[2]
                    $candidates = if ($ManagedResourceGroupIds.Count -gt 0) {
                        $ManagedResourceGroupIds
                    }
                    else {
                        @(
                            "/subscriptions/$subscriptionId/resourceGroups/rg-$resourceGroupName-managed"
                            "/subscriptions/$subscriptionId/resourceGroups/rg-$resourceName-managed"
                        )
                    }
                    foreach ($candidate in $candidates | Select-Object -Unique) {
                        if ($candidate -notmatch ('^/subscriptions/{0}/resourceGroups/[^/]+$' -f [regex]::Escape($subscriptionId))) {
                            throw [AvmConfigurationException]::new("Unexpected Databricks managed resource group: $candidate")
                        }
                        $group = Invoke-AvmBicepCleanupLookup -Command 'Get-AzResourceGroup' -Parameters @{
                            Name = $candidate.Split('/')[-1]
                        }
                        if ($null -eq $group) {
                            continue
                        }
                        $managedBy = [string](Get-AvmPropertyValue -InputObject $group -Name 'ManagedBy')
                        if ($managedBy -ine $ResourceId) {
                            throw [AvmProcessException]::new(
                                "Resource group '$candidate' is not managed by '$ResourceId'; it was not removed.")
                        }
                        if ($PSCmdlet.ShouldProcess($candidate, 'Remove Databricks managed resource group')) {
                            $null = Remove-AzResourceGroup -Name $candidate.Split('/')[-1] -Force
                            Write-AvmLog -Level Info -Message "Requested deletion of managed resource group $($candidate.Split('/')[-1])."
                        }
                    }
                    break
                }

            }
            if ($RequireCompleteRemoval -and (Test-AvmBicepSoftDeletedResource -ResourceId $ResourceId -Type $Type)) {
                throw [AvmProcessException]::new("Soft-deleted resource remains reserved: $ResourceId")
            }
            break
        }
        catch {
            if ((Get-AvmBicepDeploymentErrorKind -ErrorRecord $_) -eq 'Cancellation' -or
                $removalRetryCount -ge $PostRemovalRetryLimit) {
                throw
            }
            Write-AvmLog -Message (
                "Post-removal failed for '$ResourceId': $($_.Exception.Message). Retrying ($removalRetryCount/$PostRemovalRetryLimit)."
            ) -Level Warning
            $removalRetryCount++
        }
    } while ($removalRetryCount -le $PostRemovalRetryLimit)
}

# SIG # Begin signature block
# MIInQAYJKoZIhvcNAQcCoIInMTCCJy0CAQExDzANBglghkgBZQMEAgEFADB5Bgor
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCD1Pokfq3hScfXz
# hGi3QwdvMZ7t2VqN1zG6F2n6XunctaCCDLowggX1MIID3aADAgECAhMzAAACHU0Z
# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD
# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD
# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1
# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD
# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB
# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8
# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg
# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4
# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R
# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk
# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B
# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O
# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw
# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg
# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0
# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh
# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv
# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy
# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9
# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H
# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3
# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n
# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs
# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo
# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb
# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6
# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z
# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v
# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs
# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA
# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX
# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg
# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl
# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow
# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo
# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ
# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh
# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h
# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd
# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp
# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t
# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5
# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs
# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK
# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5
# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW
# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ
# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC
# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB
# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx
# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI
# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4
# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh
# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q
# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU
# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb
# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z
# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u
# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW
# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV
# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10
# 1cY2L4A7GTQG1h32HHAvfQESWP0xghncMIIZ2AIBATBuMFcxCzAJBgNVBAYTAlVT
# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv
# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w
# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ
# KoZIhvcNAQkEMSIEICPKwnJ0lIZnPTdJvbNGMNnH/OAoLVe3ONekoKsH0zJwMEIG
# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v
# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAfmM5kt6/Fd0nNFbL
# Bdefwkya6Uv80B3NtK3V/nmMWw0NSi4/A/CDRFxuw+P9/AgkRAk+El1ka/Gf5TwQ
# bBH/p92saFgk40C3vPrmLKOaVNGTaKL/npNrinCHLJA7D9tDNtPoR8Uu0yILp/i9
# DwcJB7uLmwH4lzLdiOLdPoaDwLUOJE+0SjMOMu1ZxuXHBFnIFvVXYDjQyBRfoVDR
# L5OmNBd91lVMba7z6IApi4yvBib7+/0SF+MENJ9XJg2HOxNMmQDSYBwYd3M7ioTq
# HL/4FSE5SrSgl3QHqJCq6kzbP4eTnfs4wi/CT4Jt9U1AIRFLsLdA1bi62GvCuM7t
# OTfRkKGCF6wwgheoBgorBgEEAYI3AwMBMYIXmDCCF5QGCSqGSIb3DQEHAqCCF4Uw
# gheBAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFZBgsqhkiG9w0BCRABBKCCAUgEggFE
# MIIBQAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCD2TGT6NCRur1To
# 40V3eHqaCXPo5vviACQlJubUpEh6HwIGauvcDCNiGBIyMDI2MTEwNTE3NTAzOS42
# OVowBIACAfSggdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt
# aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjJEMUEtMDVFMC1EOTQ3MSUw
# IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloIIR+zCCBygwggUQ
# oAMCAQICEzMAAAI3pB13SYKcdwYAAQAAAjcwDQYJKoZIhvcNAQELBQAwfDELMAkG
# A1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQx
# HjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9z
# b2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwHhcNMjYxMDE1MTgzNzQ2WhcNMjgwMTEx
# MTgzNzQ2WjCB0zELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO
# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEt
# MCsGA1UECxMkTWljcm9zb2Z0IElyZWxhbmQgT3BlcmF0aW9ucyBMaW1pdGVkMScw
# JQYDVQQLEx5uU2hpZWxkIFRTUyBFU046MkQxQS0wNUUwLUQ5NDcxJTAjBgNVBAMT
# HE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIiMA0GCSqGSIb3DQEBAQUA
# A4ICDwAwggIKAoICAQCzM1ua7N8pyIf1IsNZAND3JWx4CXWsdp3tAL/N0cQFBH5p
# n1xYnfzgzhz7yg4FzNTdxwQC5YaUrVsux/24wBQZ2q16ET3xBKcaWQ5nhpjVmDzF
# qslsDlpLu5iboTOPiwkYUhl+9jti5u+L1xgBtO4728y/YI4QPNtB0RYD2mVu6Cp7
# AnztsfNZFB15wFCBtPQQxHa0gTxJ8gL5RBYuo02HwgKcOw9VW1PvakEkGGaKHrP4
# AflbpqrboVD+dEOJ8DTGf8wB/7JiLT0C+yo4WbpyjSqmRER/LFWgANV9b/qbyXOH
# cy06y/e/uyQJwlphiXk/9Ovksv2GYACG8nNcUonXEl9rnE1cH/l4IWk4FeizWxYh
# sRdJUIbRiKY5+VR8PsVdJ3CvpMUeIoyLWfWzA0bE9In+DUWQCY4+4/i8H6nIevXy
# sHQPxnvGSE58bdbQIXySdx0zmH7EI0m/+7iA5SPh11rPLsC5+LveEiMFhMt7H4vA
# LSyE0wUE9jQjrwhafkznzEt3y8ofe1b7iSTJitiX06l2p1pAVynMfwWYxF/QffN0
# m9ayi32IuDyvVygySnpWN40jTiTNaDSSNGrXLPV07lBb9wU7J4o0h4bDc9oSnLt8
# rwOeeXmH7GmWU5TV5c1yTTXjxY7Svvnuis8PSmxJBU14vxUOLkvA6+n+TYBWBwID
# AQABo4IBSTCCAUUwHQYDVR0OBBYEFFmYj+wQ9N6dmWoI3vQJUYSC2cPEMB8GA1Ud
# IwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1UdHwRYMFYwVKBSoFCGTmh0
# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3JsL01pY3Jvc29mdCUyMFRp
# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggrBgEFBQcBAQRgMF4wXAYI
# KwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMv
# TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3J0MAwGA1Ud
# EwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwDgYDVR0PAQH/BAQDAgeA
# MA0GCSqGSIb3DQEBCwUAA4ICAQBzrBoMHtMEcT7ep5/FGFV/ByTeBrgzIaKxeI4V
# 74HMlS5ACxBDssg7IyCijvf/a9ZQRz+KS25owvRu5/tQAGvkgm6C2NwnxrbmmlES
# 3sGR8SW4nSkrOlI3KgV47TUnDg4NQQnmyaa5oQ1/Zg0nVpeIqcJXBmLaSTPGvVUL
# GT0DPw7Z4UsxcwnLHCgUknPknYuSVsAH9/8K0hUwgwcIN0SYKdGD+RO8Nqx31TH5
# SrBJjK3qPN+r4kj2Jp2zeQJiT4EH+LOt0ZB0YW9eBq0TRtF+C7FmzsO6gw4SN6Rb
# YKWoZ8wXmAzENg71BOUXtYBljW9yDdp0gKCGDC+f/IEyv2J04DGv87qtXdZnZ8rZ
# WJsLIF+9WOx3CoGl3tXcTrn2cca2raGuEfokeGgda+cQNmvvRtARyZTryGSpm79+
# scZHdPAqj35fupKbEzIXh9CnxLGt3/QwpNCdHyMTOHDr+L9dUFIwBYoroz6G4+J6
# XStAvMINP4mS+KwX03oUIjAYCW8dNmoM8TkwMbgMp2BnZRC92u494shqOl/o3T2o
# Eh8Ce1kfOxVPpFqbPCfx+YX96IKy5doDl9OhKPFlGBIYFCChsngAjJq2wVMxK3X2
# RWWBtX0N7Jx93jeutzt/sZfB2zLdBTdTs+YMqtfJuUpUhk4doZ425dDMWozDcOjE
# 1jKjpDCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcN
# AQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD
# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAw
# BgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEw
# MB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMx
# EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoT
# FU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUt
# U3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk
# 4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9c
# T8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWG
# UNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6Gnsz
# rYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2
# LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLV
# wIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTd
# EonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0
# gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFph
# AXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJ
# YfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXb
# GjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJ
# KwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnP
# EP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMw
# UQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9z
# b2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggr
# BgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYw
# DwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoY
# xDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtp
# L2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYB
# BQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20v
# cGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0B
# AQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U5
# 18JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgAD
# sAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo
# 32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZ
# iefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZK
# PmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RI
# LLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgk
# ujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9
# af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzba
# ukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/
# OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggNWMIIC
# PgIBATCCAQGhgdmkgdYwgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n
# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y
# YXRpb24xLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGlt
# aXRlZDEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjJEMUEtMDVFMC1EOTQ3MSUw
# IwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEwBwYFKw4D
# AhoDFQDvgH4FlWKdx0o0N9f/BDuvjdy1eKCBgzCBgKR+MHwxCzAJBgNVBAYTAlVT
# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK
# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l
# LVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7pcDNjAiGA8yMDI2MTEw
# NTEzMjkyNloYDzIwMjYxMTA2MTMyOTI2WjB0MDoGCisGAQQBhFkKBAExLDAqMAoC
# BQDulwM2AgEAMAcCAQACAgFNMAcCAQACAh+LMAoCBQDumFS2AgEAMDYGCisGAQQB
# hFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAIAgEAAgMBhqAw
# DQYJKoZIhvcNAQELBQADggEBACtFCaCrmrPyWtY7KsVB13PYAJDoMasi9J4cgz+T
# 1gJmldKTu7FYoDS5VZrlIyy0QPp1LAiRqefqN4Jq0JKVQscWO2WslEBaP7w+uACs
# u9N/W6BEXGzqkugFakdE4lHGrQLdg8uQ3BSNK7QdMo6tlHpC4u4zyQi/2PEh1nBO
# ECXaIRiGLAqaoOT/JrH2YSBBIMB88epjOLW9hSNPqzXmk98/Xiya8zAadfrv5VuS
# yuw+UzrEhzYFwf57bqKLL3kFGiucr4cC/oLqMD/KLFH9+1YnolVTz44omxJqFTZK
# ai9HTiRmTh3cOPNusTZ8C43nS/VfOdGVwQREvY9POMqDI2kxggQNMIIECQIBATCB
# kzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH
# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQD
# Ex1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAjekHXdJgpx3BgAB
# AAACNzANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJ
# EAEEMC8GCSqGSIb3DQEJBDEiBCCLYlJLD8+r7X/OunMl2hnjHZzfnOcY0DRRdmnM
# Gq0VTzCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIFBPSgCtY8ZMN84d4pMo
# BurMr1YNsbAtCtSPffC16vX1MIGYMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNV
# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv
# c29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAg
# UENBIDIwMTACEzMAAAI3pB13SYKcdwYAAQAAAjcwIgQgwZVGEIliRKs0+xnGa6RF
# Z5Tun5KI8qj68BppryK8Z/MwDQYJKoZIhvcNAQELBQAEggIAOf/2vg4c/u2r0ULR
# JbOuvjgF+vgHTzOYQw2OPRPvW/Kzc9YFLM7nJ6qoev0SoT7butSipzh/vTYelk3/
# VSHUDrzp6zKQPKRySln8IiI5og0Yvn/BakfAYzCjQ5c4sycekGNVmTNLZhOgKL2L
# WzIKJAQiq23KVVdD4/9WJX45D+Qx2pXAua+EMsA/WYlBLZu0gH2Tgm1IAbGpBRMA
# OOW7vICp69fgY9Qb2wsM/iTRHOKLBFfAxjaZLhFQdBXc1sDP0Vc0wnGcudP78uf6
# fz/PTKUVmuVQoJLhLVEUZvccGRFIGxG7Qb6wo7Y1TIcoh2nfWCf8qiUkL2PGQNjl
# 2yaaCkSmVAasZXS7Zz3OLt31OuiQp54d9y3JAWoqzurjXYa+G+VA51zyaUTblY8Y
# n9lUThy/BOonS2xUkn4fQ8Askt3KL6Z/BBuBf9BodcE4s+T3Dfqsa78FpR2U1cQW
# Cya+KoEeRIOL973nz9jirQXxPWDSjXRHDZ5Dj7CC0NYBC+NxrsNoQgDvBZ3QglQ6
# r1203FlACBah30UCp4ui71ksMHAIokCx4w63C3D3kLJ0Sn0Au0t+HE52edcPj/uh
# nFKNg3HfcsmGdLdvnMfyQ4fi7Wt0/WrD03/CdgWLiDCgFF+lp6zDMQLnJgh3rqe0
# 5XbLiRJVdfa/9n+agV855zWgqhY=
# SIG # End signature block