Avm.Authoring

0.40.0

Private/Tests/Read-AvmBicepScopedWhatIf.ps1

                                function Read-AvmBicepScopedWhatIf {

    [CmdletBinding()]

    [OutputType([pscustomobject])]

    param(

        [Parameter(Mandatory)]

        [AllowEmptyString()]

        [string] $Output,

        [Parameter(Mandatory)]

        [string] $File,

        [Parameter(Mandatory)]

        [ValidateSet('sub', 'mg', 'tenant')]

        [string] $Scope,

        [Parameter(Mandatory)]

        [string] $SubscriptionId,

        [Parameter(Mandatory)]

        [string] $RunId,

        [string] $ManagementGroupId,

        [switch] $RequireOwnedGroup

    )

    Set-StrictMode -Version 3.0

    $ErrorActionPreference = 'Stop'

    $changes = @(Read-AvmBicepWhatIfChange -Output $Output -File $File)

    if ($changes.Count -eq 0) {

        throw [AvmConfigurationException]::new(

            "Bicep e2e what-if for '$File' predicted no resources; deployment was refused.")

    }

    $ownedGroupName = ''

    if ($RequireOwnedGroup) {

        if ($Scope -ne 'sub') {

            throw [AvmConfigurationException]::new(

                'A run-owned group is supported only beneath a subscription deployment.')

        }

        $groupPattern = '^/subscriptions/{0}/resourceGroups/(?<name>[^/?#]+)$' -f [regex]::Escape($SubscriptionId)

        $groupChanges = @($changes | Where-Object { $_.ResourceId -imatch $groupPattern })

        if ($groupChanges.Count -ne 1) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' must create exactly one group in the selected subscription.")

        }

        $groupResource = Get-AvmBicepScopedResource -ResourceId $groupChanges[0].ResourceId `

            -Scope sub -SubscriptionId $SubscriptionId -RunId $RunId

        $ownedGroupName = $groupResource.Name

    }

    $plan = $Output | ConvertFrom-Json -AsHashtable -ErrorAction Stop

    $resources = [System.Collections.Generic.List[object]]::new()

    $deployments = [System.Collections.Generic.List[object]]::new()

    $seen = [System.Collections.Generic.HashSet[string]]::new(

        [System.StringComparer]::OrdinalIgnoreCase)

    for ($index = 0; $index -lt $changes.Count; $index++) {

        $change = $changes[$index]

        if ($change.ChangeType -cne 'Create' -or -not $seen.Add($change.ResourceId)) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' contains a non-Create or duplicate change at '$($change.ResourceId)'; deployment was refused.")

        }

        $resource = Get-AvmBicepScopedResource -ResourceId $change.ResourceId `

            -Scope $Scope -SubscriptionId $SubscriptionId -ManagementGroupId $ManagementGroupId `

            -RunId $RunId -OwnedGroupName $ownedGroupName

        $after = $plan['changes'][$index]['after']

        if ($after -isnot [System.Collections.IDictionary]) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' did not expand '$($change.ResourceId)' into a full resource payload.")

        }

        if (-not [string]::Equals([string]$after['name'], $resource.Name,

                [System.StringComparison]::OrdinalIgnoreCase) -or

            -not [string]::Equals([string]$after['type'], $resource.Type,

                [System.StringComparison]::OrdinalIgnoreCase) -or

            ($after.Contains('id') -and

            -not [string]::Equals([string]$after['id'], $resource.Id,

                [System.StringComparison]::OrdinalIgnoreCase))) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' returned an inconsistent expanded resource at '$($resource.Id)'.")

        }

        if ($RequireOwnedGroup) {

            foreach ($field in @('scope', 'subscriptionId', 'managementGroupId', 'tenantId')) {

                if ($after.Contains($field)) {

                    throw [AvmConfigurationException]::new(

                        "Bicep e2e what-if for '$File' returned an unexpected $field on '$($resource.Id)'.")

                }

            }

            if ($after.Contains('resourceGroup') -and

                ($resource.Kind -eq 'Group' -or

                $after['resourceGroup'] -isnot [string] -or

                -not [string]::Equals($after['resourceGroup'], $ownedGroupName,

                    [System.StringComparison]::OrdinalIgnoreCase))) {

                throw [AvmConfigurationException]::new(

                    "Bicep e2e what-if for '$File' returned a foreign group target for '$($resource.Id)'.")

            }

        }

        $tags = $after['tags']

        $ownership = Get-AvmBicepRunOwnership -Tags $tags -RunId $RunId

        if ($RequireOwnedGroup -and $ownership.State -eq 'Ambiguous') {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' returned ambiguous ownership tags for '$($resource.Id)'.")

        }

        if ($resource.Kind -eq 'Group' -and $ownership.State -ne 'Owned') {

            throw [AvmConfigurationException]::new(

                "Bicep e2e group '$($resource.Id)' must include its exact $((Get-AvmBicepConfiguration)['e2e']['ownershipTag']) ownership tag.")

        }

        if ($RequireOwnedGroup -and $resource.Kind -ne 'Group' -and

            (($null -ne $tags -and $tags -isnot [System.Collections.IDictionary]) -or

            $ownership.State -eq 'Foreign')) {

            throw [AvmConfigurationException]::new(

                "Bicep e2e what-if for '$File' returned unverified ownership tags for '$($resource.Id)'.")

        }

        if ($resource.Kind -eq 'Deployment') {

            if ($RequireOwnedGroup) {

                $properties = $after['properties']

                if ($properties -isnot [System.Collections.IDictionary] -or

                    $properties['mode'] -isnot [string] -or

                    $properties['mode'] -cne 'Incremental' -or

                    $properties['template'] -isnot [System.Collections.IDictionary]) {

                    throw [AvmConfigurationException]::new(

                        "Bicep e2e what-if for '$File' did not expand inline group deployment '$($resource.Id)'.")

                }

                $nestedSchema = $properties['template']['$schema']

                if ($nestedSchema -isnot [string] -or

                    $nestedSchema -cnotmatch '^https://schema\.management\.azure\.com/schemas/\d{4}-\d{2}-\d{2}/deploymentTemplate\.json#$') {

                    throw [AvmConfigurationException]::new(

                        "Bicep e2e what-if for '$File' returned a non-group nested template at '$($resource.Id)'.")

                }

                $previewTemplate = @{

                    resources = @(@{

                            type       = 'Microsoft.Resources/deployments'

                            properties = $properties

                        })

                }

                Assert-AvmBicepScopedTestIsolation -Template $previewTemplate `

                    -Scope group -SourcePath $File

            }

            $deployments.Add($resource)

        }

        else {

            $resources.Add($resource)

        }

    }

    if ($resources.Count -eq 0) {

        throw [AvmConfigurationException]::new(

            "Bicep e2e what-if for '$File' predicted no inspectable resources; deployment was refused.")

    }

    if ($RequireOwnedGroup -and

        (@($resources | Where-Object { $_.Kind -eq 'Group' }).Count -ne 1 -or

        @($resources | Where-Object { $_.Kind -eq 'Resource' }).Count -eq 0 -or

        $deployments.Count -eq 0)) {

        throw [AvmConfigurationException]::new(

            "Bicep e2e what-if for '$File' lacks an owned group, its inline deployment or an approved group resource.")

    }

    return [pscustomobject]@{

        Resources      = $resources.ToArray()

        Deployments    = $deployments.ToArray()

        Changes        = $changes

        OwnedGroupName = $ownedGroupName

    }

}

# SIG # Begin signature block

# MIInKgYJKoZIhvcNAQcCoIInGzCCJxcCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCA4bnO91pLL7Tnt

# rLRyhJRJTb0pA+z0fF1R5Dv7jAeBsqCCDLowggX1MIID3aADAgECAhMzAAACHU0Z

# yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD

# VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD

# b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1

# OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD

# VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB

# DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8

# o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg

# 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4

# Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R

# X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk

# ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B

# Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O

# BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw

# HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg

# UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0

# JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh

# MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv

# Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy

# dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9

# s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H

# VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3

# w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n

# 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs

# A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo

# Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb

# SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6

# 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z

# V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v

# 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs

# /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA

# AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX

# YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg

# Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl

# IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow

# VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo

# MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ

# KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh

# emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h

# KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd

# M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp

# yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t

# Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5

# REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs

# 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK

# Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5

# pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW

# eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ

# 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC

# NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU

# ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny

# bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0

# dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx

# MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI

# MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4

# NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh

# ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q

# hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU

# nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb

# H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z

# uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u

# vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW

# 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV

# DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10

# 1cY2L4A7GTQG1h32HHAvfQESWP0xghnGMIIZwgIBATBuMFcxCzAJBgNVBAYTAlVT

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv

# c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w

# DQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwLwYJ

# KoZIhvcNAQkEMSIEICWRQulxCeUU3m83bCgqXsrsfS+sv+hm7hwDOjgcP2ytMEIG

# CisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEADwl7qLPRl0lGE5Zr

# UuZ0Cm+lT7nSlPi0FShdAEJ+KhdN5aup5tYkd3Om7CjkMrgNTuamvNzNdHHCDcfF

# PKgVf2l5hf6bD2CWnP1rjWzY8gZ6+TbGrY4NBrzWKRldYV1XUy4xoXNKJU2l/EDw

# KBu9FmYv3qfLj6eecWcrHiZskK07cUF8g6Q9Lq4D7niecCfxhspqXOmrXCULwG1P

# LNptsqwcf0lgjY12+mnj8LHAL14Qoy0/uFMM/qZCwpBGk5XzENogfj2e5isZ9gGa

# pJnmO6/GoJ7bzg22poeHf8MRfDoD6YsJdr/CmXCGLvTmMBRu7Yy3z0qM27ZGKBHC

# IW/Rf6GCF5YwgheSBgorBgEEAYI3AwMBMYIXgjCCF34GCSqGSIb3DQEHAqCCF28w

# ghdrAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8

# MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCCQxc7/y4fCx3Yi

# AVqhJDIxaI06lqnJ0u6NnxIngZ7obQIGatlOVS2bGBIyMDI2MTEwOTA5MzQzOC44

# N1owBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n

# dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y

# YXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAl

# BgNVBAsTHm5TaGllbGQgVFNTIEVTTjpEQzAwLTA1RTAtRDk0NzElMCMGA1UEAxMc

# TWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEe0wggcgMIIFCKADAgECAhMz

# AAACJDuEIbAsrGQiAAEAAAIkMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1l

# LVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5Mzk1OVoXDTI3MDUxNzE5Mzk1OVow

# gcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS

# ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsT

# HE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQg

# VFNTIEVTTjpEQzAwLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKPp

# bdRpDZmviE29LLuPtQw8VXKztoTEYH4kXDKTPNeDeNrJib2A4tcnu02FTZ6aGstA

# I5lyAu/PoWSqaCHNDHOaSAq0tiIpoTOGiA79x7SVOF0s11W0zBA5iCj5e1cBlxWI

# FfgtweTfxG6xmIXvDFJrm38vGJzTj5n+GXLWAlCkh4UOqnhr0+4u3yux8fTm9b2l

# T26uIZ0PF8lef+Vzj0LFteoDcRfXsvbhtzq36YW48MAkoqlqLddeoXacmWlM992s

# Db2xZNI0qKD0K0ELm3NCPR+Vuxr/jCo7275GS7CllvdvuqdbkV0WsNHW9CZd+OXJ

# Q/1k7fzzf03BK6Ie2+wUI2RM0hfw4vldWrWewrK7/8Z4hn1i7Gx8sF52obTbg8MR

# HKsCzSm99RY4tqlVBqMc+gKe41Iq9sSHuzkhDRiC6kaOL4fusgPHb+YgQj7pDxbA

# G2TdjHKGOPQZfD3T2LQSRORXLL7XIAOPBILxvDaozj4xziHLK2VnNJzQg9QGrVga

# djAKMjBrn+UxbSkWf8ekl0Hpd4y5O1hM6lo+ijrgWNCvItdaN3ii+nDmU7Dtf6/c

# T2TA31UEL7AkRIEQILWBkwJLlNpXB8TXDimdddvWpP1uOBGw+Dh2SWu5RN2if/dI

# 23RrRDk1zZSX6syVDFeg/2KxfAw2co7kkmSpENFVAgMBAAGjggFJMIIBRTAdBgNV

# HQ4EFgQUcx+RfW7/MksIx7SCpiK3HW0Ad6gwHwYDVR0jBBgwFoAUn6cVXQBeYl2D

# 9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3Nv

# ZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUy

# MDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1l

# LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUB

# Af8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQAD

# ggIBAD7AdJuaEikzwJFVni2TrbiFD4t1lcTiqh5C6LvsJ41reOrUU7OLsxEqSSjp

# 2IQMdc81a8BqDFqy0J7A/OblMI2HWzioIeHhHYb+vjzBT8ylzrz9YOYnLkIhCf8X

# CmzWxs1QS7sHODTTipQshUn3reOj9qbjHAqDCH69JUvv92Gx9Pt2+GlF11tgtBMd

# mDC40HpCFwQSyCiAtXA1GPftURZkOLCgx3HILthitC7owJW2LMec62RJfsWoiiLq

# OVx+p+jrX24Mf2vyTaoA4cJ4QCopcrKYhcMxwYaUR0MVtiINmA8IEzQgeAB6KVRK

# ifTvCMe7R7SywGa0Fp89vgZ37kW5GdYbdcZ73U0KksqqYVr/gaRXP04zNlSDyhzP

# EL/glPcd/jkkS2zNOhfA2yRXck0Jy7Ygi2vpIkeaLcQNUAMNFI2F3MVGliamUYSU

# +XkZGg+0mIMS9Ehu/kwUojDbH2Cd6F/ki8GMLhmQGD7gZOmoYTeaafMXech6Q6Rf

# i6DT/SY3YJJquG5KL02Ycg6lQ3Z5AdS2BNv/4aaruCS0IzAir8k4JgiJNiqm/Whu

# MAYp1Yw8KuVLI0CzSNljOSFrnfnXnw0zH7AEa+x8WhWwIwbk5ynq9boJfK5ZFtRW

# oxTU6tBsd93LMmluEkLU9sBkjIkJs35UGANMDNMpjzDghJLBMIIHcTCCBVmgAwIB

# AgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UE

# BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc

# BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0

# IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1

# WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu

# Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv

# cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCC

# AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O

# 1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZn

# hUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t

# 1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxq

# D89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmP

# frVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSW

# rAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv

# 231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zb

# r17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYcten

# IPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQc

# xWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17a

# j54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQAB

# MCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQU

# n6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEw

# QTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9E

# b2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQB

# gjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/

# MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJ

# oEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01p

# Y1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYB

# BQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9v

# Q2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3h

# LB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x

# 5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74p

# y27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1A

# oL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbC

# HcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB

# 9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNt

# yo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3

# rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcV

# v7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A24

# 5oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lw

# Y1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA1AwggI4AgEBMIH5oYHRpIHOMIHL

# MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk

# bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN

# aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT

# UyBFU046REMwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0

# YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAKYI8duax4BJ97/9sa1f15Ab7T7j

# oIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAO

# BgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEm

# MCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcN

# AQELBQACBQDum4XdMCIYDzIwMjYxMTA4MjMzNTU3WhgPMjAyNjExMDkyMzM1NTda

# MHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAO6bhd0CAQAwCgIBAAICDmYCAf8wBwIB

# AAICE1owCgIFAO6c110CAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoD

# AqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQsFAAOCAQEAVx2H

# JC34y3ahNeMCK9Xrzo0mtYLM7tUpHWqFSxvCgAV8Yjs7iorRssDZbzCwrvCjGHBj

# 1mQpSbJQv+jy1LOsNvOKYd/GwlXdNvIdX9AQE49dkpqyJHkQjTGAL9cXqqIh1ylQ

# Mwinali7y4BGfJIpVGjNgybnV9LodJywKMkg/l0qcNA2F/YtPwEzBKVaCE6QoWTm

# hFXLY1LvpnnHH7Ex338iQAEFYa/Jxe6p8uGnfpWA947IGC1Eb1O9oZvGqS3ukoL9

# tP/9gB85SQ3lfKvH4kJSw0j5DlnJfgipTo8SxuXD376GuYKmFa0WlRo6AdfmqQ/f

# f2z99PdhW0/1Kh2mETGCBA0wggQJAgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwAhMzAAACJDuEIbAsrGQiAAEAAAIkMA0GCWCGSAFlAwQCAQUAoIIB

# SjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIENM

# fefeD1t7h7louuqw5/+KupBPtK3NWfTJ8xst9ok2MIH6BgsqhkiG9w0BCRACLzGB

# 6jCB5zCB5DCBvQQgSCE9N2qb91HJnQFzNdx2WhUSogJ1yalU1sf0IRXNZI4wgZgw

# gYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYD

# VQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiQ7hCGwLKxk

# IgABAAACJDAiBCDCEJBqqiuy8fGI954iggpKk9G0lLZFSC6/8nWDY9G4xTANBgkq

# hkiG9w0BAQsFAASCAgBgGPBWhJHjbe0Rk+jtKXgSQV1jvOJ0d1XqcflkNoH7w2JM

# 1rIqcWo3BfriKQrkCdFweOVFI8GjEZQZzQvqSSEJF1TOI8WuqIN77ysO9+oryQRt

# cal2kvONM+K6ub9doxKad5zu0bA4btlC4GFgXZ7ULm3wHlqWc7H8+9b2AaYdS6md

# N/E6Xop1NP/2MZgW4gPx8N3zpQ8Uv/aDfAK0HkVkvuuT+lvjzr+LBtXfGwpb37wr

# hOwjxQUpMXM+TBwkDCh0qjsADBCKXTpvYa3KA8ZTsSX6zd0o7Xnc/6Lg7aghbjGK

# FNKk96hrrZ7zOOprO/SrDchlGvb9d59erc77FyYhcOb5EDBTYxpZV9+MJz7MjT8E

# dGSZYMkiaqIGHy9OZEiA4Y29UBLUrHLVDieNE14ZCieEJ/9y8f9wB0ipQzYmUF/A

# r7odnpuD5hlXo8hNy+PDvdDQ5P2qHWPFmbvlfIICIja+EOkemH4uWxGdMwuPoVsn

# oxHUbEK7dkvCUAZ8orP3vDBCRiSZFE/R/MdovTKJehR8jGmR3xDLt2QltLlpfBKL

# rsu4B2iAqV4qTRtNvKBkR5+uw+u6NfpLzLTjX49k6qp1/PPoCwjEfOh4Ov/WLWvY

# AQYaP93B1M8EZuFXxOu3Srr8V0jqu52sX/uSoHYFtzgJClbBSyMZdQdTWLSMbA==

# SIG # End signature block