CharlandCustomizations

0.2.0-beta

Public/Invoke-CCScriptMultiAccountRegion.ps1

                                function Invoke-CCScriptMultiAccountRegion {

  <#

.SYNOPSIS

    Invokes AWS commands across multiple accounts and regions to gather data.

.DESCRIPTION

    Executes a ScriptBlock against multiple AWS accounts (via profiles) and regions,

    collecting the output from each invocation. Each output object is optionally

    enriched with the AccountId and Region it came from, making it easy to aggregate

    and compare data across your AWS estate.

    Designed for read-only data gathering (e.g., Get-EC2SecurityGroup, Get-S3Bucket,

    Get-IAMUser). The ScriptBlock runs with AWS environment variables

    (AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY/AWS_SESSION_TOKEN or AWS_PROFILE, plus

    AWS_DEFAULT_REGION) set for each account/region iteration.

.PARAMETER ProfileName

    One or more AWS profile names to iterate over. Accepts pipeline input.

    If not specified, uses the current default AWS profile.

.PARAMETER Region

    One or more AWS regions to query per profile. Defaults to the current default region.

.PARAMETER ScriptBlock

    The ScriptBlock to execute for each account/region combination.

.PARAMETER IncludeAccountId

    When specified, adds an AccountId property to each output object.

.PARAMETER IncludeRegion

    When specified, adds a Region property to each output object.

.PARAMETER IncludeProfileName

    When specified, adds a ProfileName property to each output object.

.PARAMETER ThrottleLimit

    Seconds to wait between calls to avoid throttling. Defaults to 0.

.PARAMETER NoProgress

    Suppress progress bar output.

.PARAMETER AccessKey

    AWS access key for explicit credentials. Optional.

.PARAMETER SecretKey

    AWS secret key for explicit credentials. Optional.

.PARAMETER SessionToken

    AWS session token for temporary credentials. Optional.

.PARAMETER Credential

    Pre-built AWS credential object. Optional.

.PARAMETER ProfileLocation

    Custom credential file path. Optional.

.PARAMETER EndpointUrl

    Custom AWS service endpoint URL. Optional.

.EXAMPLE

    Invoke-CCScriptMultiAccountRegion -ProfileName 'dev','prod' -Region 'us-east-1' `

        -ScriptBlock { Get-STSCallerIdentity } -IncludeRegion -IncludeProfileName

.EXAMPLE

    Get-AWSCredential -ListProfileDetail | Select-Object -ExpandProperty ProfileName |

        Invoke-CCScriptMultiAccountRegion -Region 'us-east-1' `

            -ScriptBlock { Get-S3Bucket } -IncludeAccountId -IncludeProfileName

#>

  [CmdletBinding()]

  param(

    [Parameter(ValueFromPipeline, ValueFromPipelineByPropertyName)]

    [string[]]$ProfileName,

    [Parameter(ValueFromPipeline, ValueFromPipelineByPropertyName)]

    [string[]]$Region,

    [Parameter(Mandatory)]

    [scriptblock]$ScriptBlock,

    [Parameter()]

    [switch]$IncludeAccountId,

    [Parameter()]

    [switch]$IncludeRegion,

    [Parameter()]

    [switch]$IncludeProfileName,

    [Parameter()]

    [ValidateRange(0, 60)]

    [int]$ThrottleLimit = 0,

    [Parameter()]

    [switch]$NoProgress,

    # AWS common parameters (credential passthrough for Get-STSCallerIdentity validation)

    [Parameter()]

    [string]$AccessKey,

    [Parameter()]

    [string]$SecretKey,

    [Parameter()]

    [string]$SessionToken,

    [Parameter()]

    [SecureString] $Credential,

    [Parameter()]

    [string]$ProfileLocation,

    [Parameter()]

    [string]$EndpointUrl

  )

  begin {

    # Build base AWS splat from credential parameters then remove ProfileName/Region

    # since those are arrays used for iteration in this function, not single-value

    # credential params to pass to AWS cmdlets directly.

    $awsParams = New-AWSParamSplat -BoundParameters $PSBoundParameters

    $awsParams.Remove('ProfileName') | Out-Null

    $awsParams.Remove('Region') | Out-Null

    if (-not $ProfileName) {

      # Try the shell's current stored credential profile name

      $currentProfile = $null

      if ($StoredAWSCredentials) {

        $currentProfile = $StoredAWSCredentials

      }

      if (-not $currentProfile) {

        # Fall back: check if there's a default profile in the credential store

        $defaultProfile = (Get-AWSCredential -ListProfileDetail |

          Where-Object { $_.ProfileName -eq 'default' } |

          Select-Object -First 1 -ExpandProperty ProfileName)

        if ($defaultProfile) {

          $currentProfile = $defaultProfile

        }

      }

      if ($currentProfile) {

        $ProfileName = @($currentProfile)

      }

      else {

        Write-Error "No ProfileName specified and no current AWS profile found. Use -ProfileName or Set-AWSCredential."

        return

      }

    }

    if (-not $Region) {

      $defaultRegion = (Get-DefaultAWSRegion).Region

      if ($defaultRegion) {

        $Region = @($defaultRegion)

      }

      else {

        Write-Error "No region specified and no default AWS region set. Use -Region or Set-DefaultAWSRegion."

        return

      }

    }

    $profileCount = 0

    $regionTotal = $Region.Count

  }

  process {

    foreach ($prof in $ProfileName) {

      $profileCount++

      if (-not $NoProgress) {

        Write-Progress -Id 1 -Activity "Processing AWS Profiles" `

          -Status "Profile: $prof (#$profileCount)" `

          -CurrentOperation "Authenticating..."

      }

      # Validate credentials before doing any work for this profile

      # Override ProfileName per iteration; base awsParams carries other credential params

      $iterParams = $awsParams.Clone()

      $iterParams['ProfileName'] = $prof

      try {

        $identity = Get-STSCallerIdentity @iterParams -ErrorAction Stop

        $accountId = $identity.Account

        Write-Verbose "Profile '$prof' resolved to AccountId: $accountId"

      }

      catch {

        Write-Warning "Skipping profile '${prof}': unable to authenticate - $_"

        continue

      }

      # Resolve the profile into concrete AccessKey/SecretKey/SessionToken.

      # For profiles stored in the credentials file (e.g., from Update-CCSSOCredentialList),

      # read the keys directly. This avoids SSO token re-resolution and SDK caching issues.

      $resolvedCreds = $null

      try {

        # Get-AWSCredential -ProfileName with the profile's location resolves correctly

        # because it reads directly from the ini file, not from the SSO token cache.

        $profileDetail = Get-AWSCredential -ListProfileDetail |

          Where-Object { $_.ProfileName -eq $prof } | Select-Object -First 1

        if ($profileDetail -and $profileDetail.ProfileLocation) {

          $credObj = Get-AWSCredential -ProfileName $prof -ProfileLocation $profileDetail.ProfileLocation

          if ($credObj -and $credObj.GetCredentials) {

            $resolvedCreds = $credObj.GetCredentials()

          }

        }

        if (-not $resolvedCreds) {

          # Fall back: try without explicit ProfileLocation

          $credObj = Get-AWSCredential -ProfileName $prof

          if ($credObj -and $credObj.GetCredentials) {

            $resolvedCreds = $credObj.GetCredentials()

          }

        }

      }

      catch {

        Write-Verbose "Could not resolve credentials for profile '$prof': $_"

      }

      $regionIndex = 0

      foreach ($r in $Region) {

        $regionIndex++

        $regionPercent = [int](($regionIndex / $regionTotal) * 100)

        if (-not $NoProgress) {

          Write-Progress -Id 2 -ParentId 1 -Activity "Processing Regions for '$prof'" `

            -Status "Region: $r ($regionIndex of $regionTotal)" `

            -PercentComplete $regionPercent

        }

        Write-Verbose "Executing against Profile='$prof', Region='$r'"

        try {

          # Save current environment variables

          $origAK = $env:AWS_ACCESS_KEY_ID

          $origSK = $env:AWS_SECRET_ACCESS_KEY

          $origST = $env:AWS_SESSION_TOKEN

          $origRegion = $env:AWS_DEFAULT_REGION

          $origProfile = $env:AWS_PROFILE

          if ($resolvedCreds -and $resolvedCreds.AccessKey) {

            # Set environment variables that the AWS SDK always respects

            $env:AWS_ACCESS_KEY_ID = $resolvedCreds.AccessKey

            $env:AWS_SECRET_ACCESS_KEY = $resolvedCreds.SecretKey

            $env:AWS_SESSION_TOKEN = $resolvedCreds.Token

            $env:AWS_DEFAULT_REGION = $r

            $env:AWS_PROFILE = $null

          }

          else {

            $env:AWS_ACCESS_KEY_ID = $null

            $env:AWS_SECRET_ACCESS_KEY = $null

            $env:AWS_SESSION_TOKEN = $null

            $env:AWS_DEFAULT_REGION = $r

            $env:AWS_PROFILE = $prof

          }

          Write-Verbose "Invoking scriptblock for Profile='$prof', Region='$r'"

          $results = & $ScriptBlock

          if ($results) {

            foreach ($item in $results) {

              $props = [ordered]@{}

              foreach ($p in $item.PSObject.Properties) {

                $props[$p.Name] = $p.Value

              }

              if ($IncludeAccountId) { $props['AccountId'] = $accountId }

              if ($IncludeRegion) { $props['Region'] = $r }

              if ($IncludeProfileName) { $props['ProfileName'] = $prof }

              $enriched = [PSCustomObject]$props

              $propNames = [string[]]$props.Keys

              $propSet = [System.Management.Automation.PSPropertySet]::new(

                'DefaultDisplayPropertySet', $propNames

              )

              $enriched | Add-Member -MemberType MemberSet -Name PSStandardMembers -Value $propSet -Force

              $enriched

            }

          }

          else {

            Write-Verbose "No results returned for Profile='$prof', Region='$r'"

          }

        }

        catch {

          Write-Warning "Error executing ScriptBlock for Profile='${prof}', Region='${r}': $_"

        }

        finally {

          # Restore original environment variables

          $env:AWS_ACCESS_KEY_ID = $origAK

          $env:AWS_SECRET_ACCESS_KEY = $origSK

          $env:AWS_SESSION_TOKEN = $origST

          $env:AWS_DEFAULT_REGION = $origRegion

          $env:AWS_PROFILE = $origProfile

        }

        if ($ThrottleLimit -gt 0) {

          Write-Verbose "Throttling: waiting $ThrottleLimit second(s)"

          Start-Sleep -Seconds $ThrottleLimit

        }

      }

      if (-not $NoProgress) {

        Write-Progress -Id 2 -ParentId 1 -Activity "Processing Regions for '$prof'" -Completed

      }

    }

  }

  end {

    if (-not $NoProgress) {

      Write-Progress -Id 1 -Activity "Processing AWS Profiles" -Completed

    }

  }

}

# SIG # Begin signature block

# MIIr0AYJKoZIhvcNAQcCoIIrwTCCK70CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAN1jGoF81unpSK

# gvp8KOaa4CZZ3utnGPFCu+iycx4iDqCCJOUwggVvMIIEV6ADAgECAhBI/JO0YFWU

# jTanyYqJ1pQWMA0GCSqGSIb3DQEBDAUAMHsxCzAJBgNVBAYTAkdCMRswGQYDVQQI

# DBJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcMB1NhbGZvcmQxGjAYBgNVBAoM

# EUNvbW9kbyBDQSBMaW1pdGVkMSEwHwYDVQQDDBhBQUEgQ2VydGlmaWNhdGUgU2Vy

# dmljZXMwHhcNMjEwNTI1MDAwMDAwWhcNMjgxMjMxMjM1OTU5WjBWMQswCQYDVQQG

# EwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMS0wKwYDVQQDEyRTZWN0aWdv

# IFB1YmxpYyBDb2RlIFNpZ25pbmcgUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEBAQUA

# A4ICDwAwggIKAoICAQCN55QSIgQkdC7/FiMCkoq2rjaFrEfUI5ErPtx94jGgUW+s

# hJHjUoq14pbe0IdjJImK/+8Skzt9u7aKvb0Ffyeba2XTpQxpsbxJOZrxbW6q5KCD

# J9qaDStQ6Utbs7hkNqR+Sj2pcaths3OzPAsM79szV+W+NDfjlxtd/R8SPYIDdub7

# P2bSlDFp+m2zNKzBenjcklDyZMeqLQSrw2rq4C+np9xu1+j/2iGrQL+57g2extme

# me/G3h+pDHazJyCh1rr9gOcB0u/rgimVcI3/uxXP/tEPNqIuTzKQdEZrRzUTdwUz

# T2MuuC3hv2WnBGsY2HH6zAjybYmZELGt2z4s5KoYsMYHAXVn3m3pY2MeNn9pib6q

# RT5uWl+PoVvLnTCGMOgDs0DGDQ84zWeoU4j6uDBl+m/H5x2xg3RpPqzEaDux5mcz

# mrYI4IAFSEDu9oJkRqj1c7AGlfJsZZ+/VVscnFcax3hGfHCqlBuCF6yH6bbJDoEc

# QNYWFyn8XJwYK+pF9e+91WdPKF4F7pBMeufG9ND8+s0+MkYTIDaKBOq3qgdGnA2T

# OglmmVhcKaO5DKYwODzQRjY1fJy67sPV+Qp2+n4FG0DKkjXp1XrRtX8ArqmQqsV/

# AZwQsRb8zG4Y3G9i/qZQp7h7uJ0VP/4gDHXIIloTlRmQAOka1cKG8eOO7F/05QID

# AQABo4IBEjCCAQ4wHwYDVR0jBBgwFoAUoBEKIz6W8Qfs4q8p74Klf9AwpLQwHQYD

# VR0OBBYEFDLrkpr/NZZILyhAQnAgNpFcF4XmMA4GA1UdDwEB/wQEAwIBhjAPBgNV

# HRMBAf8EBTADAQH/MBMGA1UdJQQMMAoGCCsGAQUFBwMDMBsGA1UdIAQUMBIwBgYE

# VR0gADAIBgZngQwBBAEwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5jb21v

# ZG9jYS5jb20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNAYIKwYBBQUHAQEE

# KDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJKoZI

# hvcNAQEMBQADggEBABK/oe+LdJqYRLhpRrWrJAoMpIpnuDqBv0WKfVIHqI0fTiGF

# OaNrXi0ghr8QuK55O1PNtPvYRL4G2VxjZ9RAFodEhnIq1jIV9RKDwvnhXRFAZ/ZC

# J3LFI+ICOBpMIOLbAffNRk8monxmwFE2tokCVMf8WPtsAO7+mKYulaEMUykfb9gZ

# pk+e96wJ6l2CxouvgKe9gUhShDHaMuwV5KZMPWw5c9QLhTkg4IUaaOGnSDip0TYl

# d8GNGRbFiExmfS9jzpjoad+sPKhdnckcW67Y8y90z7h+9teDnRGWYpquRRPaf9xH

# +9/DUp/mBlXpnYzyOmJRvOwkDynUWICE5EV7WtgwggYUMIID/KADAgECAhB6I67a

# U2mWD5HIPlz0x+M/MA0GCSqGSIb3DQEBDAUAMFcxCzAJBgNVBAYTAkdCMRgwFgYD

# VQQKEw9TZWN0aWdvIExpbWl0ZWQxLjAsBgNVBAMTJVNlY3RpZ28gUHVibGljIFRp

# bWUgU3RhbXBpbmcgUm9vdCBSNDYwHhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1

# OTU5WjBVMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMSww

# KgYDVQQDEyNTZWN0aWdvIFB1YmxpYyBUaW1lIFN0YW1waW5nIENBIFIzNjCCAaIw

# DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAM2Y2ENBq26CK+z2M34mNOSJjNPv

# IhKAVD7vJq+MDoGD46IiM+b83+3ecLvBhStSVjeYXIjfa3ajoW3cS3ElcJzkyZlB

# nwDEJuHlzpbN4kMH2qRBVrjrGJgSlzzUqcGQBaCxpectRGhhnOSwcjPMI3G0hedv

# 2eNmGiUbD12OeORN0ADzdpsQ4dDi6M4YhoGE9cbY11XxM2AVZn0GiOUC9+XE0wI7

# CQKfOUfigLDn7i/WeyxZ43XLj5GVo7LDBExSLnh+va8WxTlA+uBvq1KO8RSHUQLg

# zb1gbL9Ihgzxmkdp2ZWNuLc+XyEmJNbD2OIIq/fWlwBp6KNL19zpHsODLIsgZ+WZ

# 1AzCs1HEK6VWrxmnKyJJg2Lv23DlEdZlQSGdF+z+Gyn9/CRezKe7WNyxRf4e4bwU

# trYE2F5Q+05yDD68clwnweckKtxRaF0VzN/w76kOLIaFVhf5sMM/caEZLtOYqYad

# tn034ykSFaZuIBU9uCSrKRKTPJhWvXk4CllgrwIDAQABo4IBXDCCAVgwHwYDVR0j

# BBgwFoAU9ndq3T/9ARP/FqFsggIv0Ao9FCUwHQYDVR0OBBYEFF9Y7UwxeqJhQo1S

# gLqzYZcZojKbMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMBMG

# A1UdJQQMMAoGCCsGAQUFBwMIMBEGA1UdIAQKMAgwBgYEVR0gADBMBgNVHR8ERTBD

# MEGgP6A9hjtodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNUaW1l

# U3RhbXBpbmdSb290UjQ2LmNybDB8BggrBgEFBQcBAQRwMG4wRwYIKwYBBQUHMAKG

# O2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY1RpbWVTdGFtcGlu

# Z1Jvb3RSNDYucDdjMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNv

# bTANBgkqhkiG9w0BAQwFAAOCAgEAEtd7IK0ONVgMnoEdJVj9TC1ndK/HYiYh9lVU

# acahRoZ2W2hfiEOyQExnHk1jkvpIJzAMxmEc6ZvIyHI5UkPCbXKspioYMdbOnBWQ

# Un733qMooBfIghpR/klUqNxx6/fDXqY0hSU1OSkkSivt51UlmJElUICZYBodzD3M

# /SFjeCP59anwxs6hwj1mfvzG+b1coYGnqsSz2wSKr+nDO+Db8qNcTbJZRAiSazr7

# KyUJGo1c+MScGfG5QHV+bps8BX5Oyv9Ct36Y4Il6ajTqV2ifikkVtB3RNBUgwu/m

# SiSUice/Jp/q8BMk/gN8+0rNIE+QqU63JoVMCMPY2752LmESsRVVoypJVt8/N3qQ

# 1c6FibbcRabo3azZkcIdWGVSAdoLgAIxEKBeNh9AQO1gQrnh1TA8ldXuJzPSuALO

# z1Ujb0PCyNVkWk7hkhVHfcvBfI8NtgWQupiaAeNHe0pWSGH2opXZYKYG4Lbukg7H

# pNi/KqJhue2Keak6qH9A8CeEOB7Eob0Zf+fU+CCQaL0cJqlmnx9HCDxF+3BLbUuf

# rV64EbTI40zqegPZdA+sXCmbcZy6okx/SjwsusWRItFA3DE8MORZeFb6BmzBtqKJ

# 7l939bbKBy2jvxcJI98Va95Q5JnlKor3m0E7xpMeYRriWklUPsetMSf2NvUQa/E5

# vVyefQIwggYaMIIEAqADAgECAhBiHW0MUgGeO5B5FSCJIRwKMA0GCSqGSIb3DQEB

# DAUAMFYxCzAJBgNVBAYTAkdCMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxLTAr

# BgNVBAMTJFNlY3RpZ28gUHVibGljIENvZGUgU2lnbmluZyBSb290IFI0NjAeFw0y

# MTAzMjIwMDAwMDBaFw0zNjAzMjEyMzU5NTlaMFQxCzAJBgNVBAYTAkdCMRgwFgYD

# VQQKEw9TZWN0aWdvIExpbWl0ZWQxKzApBgNVBAMTIlNlY3RpZ28gUHVibGljIENv

# ZGUgU2lnbmluZyBDQSBSMzYwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIB

# gQCbK51T+jU/jmAGQ2rAz/V/9shTUxjIztNsfvxYB5UXeWUzCxEeAEZGbEN4QMgC

# sJLZUKhWThj/yPqy0iSZhXkZ6Pg2A2NVDgFigOMYzB2OKhdqfWGVoYW3haT29PST

# ahYkwmMv0b/83nbeECbiMXhSOtbam+/36F09fy1tsB8je/RV0mIk8XL/tfCK6cPu

# YHE215wzrK0h1SWHTxPbPuYkRdkP05ZwmRmTnAO5/arnY83jeNzhP06ShdnRqtZl

# V59+8yv+KIhE5ILMqgOZYAENHNX9SJDm+qxp4VqpB3MV/h53yl41aHU5pledi9lC

# BbH9JeIkNFICiVHNkRmq4TpxtwfvjsUedyz8rNyfQJy/aOs5b4s+ac7IH60B+Ja7

# TVM+EKv1WuTGwcLmoU3FpOFMbmPj8pz44MPZ1f9+YEQIQty/NQd/2yGgW+ufflcZ

# /ZE9o1M7a5Jnqf2i2/uMSWymR8r2oQBMdlyh2n5HirY4jKnFH/9gRvd+QOfdRrJZ

# b1sCAwEAAaOCAWQwggFgMB8GA1UdIwQYMBaAFDLrkpr/NZZILyhAQnAgNpFcF4Xm

# MB0GA1UdDgQWBBQPKssghyi47G9IritUpimqF6TNDDAOBgNVHQ8BAf8EBAMCAYYw

# EgYDVR0TAQH/BAgwBgEB/wIBADATBgNVHSUEDDAKBggrBgEFBQcDAzAbBgNVHSAE

# FDASMAYGBFUdIAAwCAYGZ4EMAQQBMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9j

# cmwuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY0NvZGVTaWduaW5nUm9vdFI0Ni5j

# cmwwewYIKwYBBQUHAQEEbzBtMEYGCCsGAQUFBzAChjpodHRwOi8vY3J0LnNlY3Rp

# Z28uY29tL1NlY3RpZ29QdWJsaWNDb2RlU2lnbmluZ1Jvb3RSNDYucDdjMCMGCCsG

# AQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOC

# AgEABv+C4XdjNm57oRUgmxP/BP6YdURhw1aVcdGRP4Wh60BAscjW4HL9hcpkOTz5

# jUug2oeunbYAowbFC2AKK+cMcXIBD0ZdOaWTsyNyBBsMLHqafvIhrCymlaS98+Qp

# oBCyKppP0OcxYEdU0hpsaqBBIZOtBajjcw5+w/KeFvPYfLF/ldYpmlG+vd0xqlqd

# 099iChnyIMvY5HexjO2AmtsbpVn0OhNcWbWDRF/3sBp6fWXhz7DcML4iTAWS+MVX

# eNLj1lJziVKEoroGs9Mlizg0bUMbOalOhOfCipnx8CaLZeVme5yELg09Jlo8BMe8

# 0jO37PU8ejfkP9/uPak7VLwELKxAMcJszkyeiaerlphwoKx1uHRzNyE6bxuSKcut

# isqmKL5OTunAvtONEoteSiabkPVSZ2z76mKnzAfZxCl/3dq3dUNw4rg3sTCggkHS

# RqTqlLMS7gjrhTqBmzu1L90Y1KWN/Y5JKdGvspbOrTfOXyXvmPL6E52z1NZJ6ctu

# MFBQZH3pwWvqURR8AgQdULUvrxjUYbHHj95Ejza63zdrEcxWLDX6xWls/GDnVNue

# KjWUH3fTv1Y8Wdho698YADR7TNx8X8z2Bev6SivBBOHY+uqiirZtg0y9ShQoPzmC

# cn63Syatatvx157YK9hlcPmVoa1oDE5/L9Uo2bC5a4CH2RwwggZMMIIEtKADAgEC

# AhAVVO/doV4MRRGuXmkecKnEMA0GCSqGSIb3DQEBDAUAMFQxCzAJBgNVBAYTAkdC

# MRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxKzApBgNVBAMTIlNlY3RpZ28gUHVi

# bGljIENvZGUgU2lnbmluZyBDQSBSMzYwHhcNMjMwODA5MDAwMDAwWhcNMjYwODA4

# MjM1OTU5WjBjMQswCQYDVQQGEwJVUzEWMBQGA1UECAwNTmV3IEhhbXBzaGlyZTEd

# MBsGA1UECgwUQ2hyaXN0b3BoZXIgQ2hhcmxhbmQxHTAbBgNVBAMMFENocmlzdG9w

# aGVyIENoYXJsYW5kMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLQA

# cUKQzYs2WJY+W2fl+/1PzX3vsFwK/W9sj1RXRLBsQjsTCYRu+jRPEZSVzL/K4L87

# 7Wxb69/ye88/RrWS0d6LUyohl0OgJwgRBXBsDIcpt3hTv7GRLAFvjzcCOvK6qk+k

# jf+bxqYSUOxfl/XDK0QvM3KgWbq2IeNHoMwvAXVFBcZnRPXp1FkcHGKf+nNwxP6V

# GWtiRrhIj99q0R4iwOQaQLRY8pe8m1wn/gwFRai1F1f/Q2EMSyvbgf7kYpFNHJK1

# 7LZR9J/G7P8h4QFQZJdMU6C4lRT+Lk2jEDF4elKF5c7DFjfMv2zd0jf3/2vOhayc

# Gna9puKwQUvtwtrmcCwOI5EXBIVBcFVS8xD6eeREvzjZXiuS83quzwxVVjNBQ2f/

# nuK54huEBbNQQeNjSkMdjyr5S0Xwf8Pic5NA4ggLUWuv2XYqTTMtXHQPZ41noEJM

# +LSBulBatGT98Tu0kib3MH7e1vREcTG7gZDnicmY0RfrWM59txft97gXP7Vj99ed

# 9t2/9niQleiT+YXy3ZpNoqGFB3XC13mM44xEff49vRSLN/B0IonG5vDpMgtFoKpq

# PtUx/oKQWtYbmoWFZkvEBRUeJOmkEmIUQonzE7aqgk/uGtyjxsBHtJzIHojA+8fG

# eD0NXjlOM1bbT0OcpSMkhRXPqiOELViMQwHrAiUCAwEAAaOCAYkwggGFMB8GA1Ud

# IwQYMBaAFA8qyyCHKLjsb0iuK1SmKaoXpM0MMB0GA1UdDgQWBBSO6WwZWwCa6iKw

# s6LE4InGvJQl3zAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADATBgNVHSUE

# DDAKBggrBgEFBQcDAzBKBgNVHSAEQzBBMDUGDCsGAQQBsjEBAgEDAjAlMCMGCCsG

# AQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBBAEwSQYDVR0f

# BEIwQDA+oDygOoY4aHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUHVibGlj

# Q29kZVNpZ25pbmdDQVIzNi5jcmwweQYIKwYBBQUHAQEEbTBrMEQGCCsGAQUFBzAC

# hjhodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNDb2RlU2lnbmlu

# Z0NBUjM2LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20w

# DQYJKoZIhvcNAQEMBQADggGBAENPYZO6JkhXuprRcjFErvAggFDfB4bJmvHwydUU

# q8EEdDkvVvS+SnqpaL+Nw5FY/X5GnIXfWKYvQJFY1o/bskqLBSH96jOk+wMWZ2Lq

# fuyEuW4OZUvBtpho2E2QwcpCQQzG47c+qtENC6lITctyoOUi5481cm9VXRL0E1g/

# MSDOqpYcd32oKt6rbqLQZD89HFgkNrfh3a4wq2O8ljai9gvQJnYV4588DGI4quzv

# 81b6mGDx9ku9zHhtvI19C1L+oQddqFFUViSwUUiNrBO7aA5iFwr1vQPkiP40Zd6f

# SSQAjrRnUI/kbK9oD2l1i/Vi9hfQ8SLarLPhW0M0qaut175+RJKlwuusUZADtgYV

# WcrmMxy20RMCUZA2bnTWXjb4pVfHUyKPU7dpM+8gG/tUPBZegMWrzWqctSPQhdRE

# pkLTMCm5E/o4ZUGNE0uo+twbGMGEyPPmjsFnIKLAqN2rHMI1Fz9pR+qMdixl+/mG

# /ElSJqGSDVArmZLn1IYhr4vQ8DCCBmIwggTKoAMCAQICEQCkKTtuHt3XpzQIh616

# TrckMA0GCSqGSIb3DQEBDAUAMFUxCzAJBgNVBAYTAkdCMRgwFgYDVQQKEw9TZWN0

# aWdvIExpbWl0ZWQxLDAqBgNVBAMTI1NlY3RpZ28gUHVibGljIFRpbWUgU3RhbXBp

# bmcgQ0EgUjM2MB4XDTI1MDMyNzAwMDAwMFoXDTM2MDMyMTIzNTk1OVowcjELMAkG

# A1UEBhMCR0IxFzAVBgNVBAgTDldlc3QgWW9ya3NoaXJlMRgwFgYDVQQKEw9TZWN0

# aWdvIExpbWl0ZWQxMDAuBgNVBAMTJ1NlY3RpZ28gUHVibGljIFRpbWUgU3RhbXBp

# bmcgU2lnbmVyIFIzNjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANOE

# lfRupFN48j0QS3gSBzzclIFTZ2Gsn7BjsmBF659/kpA2Ey7NXK3MP6JdrMBNU8wd

# mkf+SSIyjX++UAYWtg3Y/uDRDyg8RxHeHRJ+0U1jHEyH5uPdk1ttiPC3x/gOxIc9

# P7Gn3OgW7DQc4x07exZ4DX4XyaGDq5LoEmk/BdCM1IelVMKB3WA6YpZ/XYdJ9Jue

# OXeQObSQ/dohQCGyh0FhmwkDWKZaqQBWrBwZ++zqlt+z/QYTgEnZo6dyIo2IhXXA

# NFkCHutL8765NBxvolXMFWY8/reTnFxk3MajgM5NX6wzWdWsPJxYRhLxtJLSUJJ5

# yWRNw+NBqH1ezvFs4GgJ2ZqFJ+Dwqbx9+rw+F2gBdgo4j7CVomP49sS7Cbqsdybb

# iOGpB9DJhs5QVMpYV73TVV3IwLiBHBECrTgUfZVOMF0KSEq2zk/LsfvehswavE3W

# 4aBXJmGjgWSpcDz+6TqeTM8f1DIcgQPdz0IYgnT3yFTgiDbFGOFNt6eCidxdR6j9

# x+kpcN5RwApy4pRhE10YOV/xafBvKpRuWPjOPWRBlKdm53kS2aMh08spx7xSEqXn

# 4QQldCnUWRz3Lki+TgBlpwYwJUbR77DAayNwAANE7taBrz2v+MnnogMrvvct0iwv

# fIA1W8kp155Lo44SIfqGmrbJP6Mn+Udr3MR2oWozAgMBAAGjggGOMIIBijAfBgNV

# HSMEGDAWgBRfWO1MMXqiYUKNUoC6s2GXGaIymzAdBgNVHQ4EFgQUiGGMoSo3ZIEo

# YKGbMdCM/SwCzk8wDgYDVR0PAQH/BAQDAgbAMAwGA1UdEwEB/wQCMAAwFgYDVR0l

# AQH/BAwwCgYIKwYBBQUHAwgwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwgwJTAj

# BggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQQCMEoG

# A1UdHwRDMEEwP6A9oDuGOWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1B1

# YmxpY1RpbWVTdGFtcGluZ0NBUjM2LmNybDB6BggrBgEFBQcBAQRuMGwwRQYIKwYB

# BQUHMAKGOWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY1RpbWVT

# dGFtcGluZ0NBUjM2LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGln

# by5jb20wDQYJKoZIhvcNAQEMBQADggGBAAKBPqSGclEh+WWpLj1SiuHlm8xLE0ST

# hI2yLuq+75s11y6SceBchpnKpxWaGtXc8dya1Aq3RuW//y3wMThsvT4fSba2AoSW

# lR67rA4fTYGMIhgzocsids0ct/pHaocLVJSwnTYxY2pE0hPoZAvRebctbsTqENmZ

# HyOVjOFlwN2R3DRweFeNs4uyZN5LRJ5EnVYlcTOq3bl1tI5poru9WaQRWQ4eynXp

# 7Pj0Fz4DKr86HYECRJMWiDjeV0QqAcQMFsIjJtrYTw7mU81qf4FBc4u4swphLeKR

# Nyn9DDrd3HIMJ+CpdhSHEGleeZ5I79YDg3B3A/fmVY2GaMik1Vm+FajEMv4/EN2m

# mHf4zkOuhYZNzVm4NrWJeY4UAriLBOeVYODdA1GxFr1ycbcUEGlUecc4RCPgYySs

# 4d00NNuicR4a9n7idJlevAJbha/arIYMEuUqTeRRbWkhJwMKmb9yEvppRudKyu1t

# 6l21sIuIZqcpVH8oLWCxHS0LpDRF9Y4jijCCBoIwggRqoAMCAQICEDbCsL18Gzrn

# o7PdNsvJdWgwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

# EwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl

# IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRp

# ZmljYXRpb24gQXV0aG9yaXR5MB4XDTIxMDMyMjAwMDAwMFoXDTM4MDExODIzNTk1

# OVowVzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDEuMCwG

# A1UEAxMlU2VjdGlnbyBQdWJsaWMgVGltZSBTdGFtcGluZyBSb290IFI0NjCCAiIw

# DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIid2LlFZ50d3ei5JoGaVFTAfEkF

# m8xaFQ/ZlBBEtEFAgXcUmanU5HYsyAhTXiDQkiUvpVdYqZ1uYoZEMgtHES1l1Cc6

# HaqZzEbOOp6YiTx63ywTon434aXVydmhx7Dx4IBrAou7hNGsKioIBPy5GMN7KmgY

# muu4f92sKKjbxqohUSfjk1mJlAjthgF7Hjx4vvyVDQGsd5KarLW5d73E3ThobSko

# b2SL48LpUR/O627pDchxll+bTSv1gASn/hp6IuHJorEu6EopoB1CNFp/+HpTXeNA

# RXUmdRMKbnXWflq+/g36NJXB35ZvxQw6zid61qmrlD/IbKJA6COw/8lFSPQwBP1i

# tyZdwuCysCKZ9ZjczMqbUcLFyq6KdOpuzVDR3ZUwxDKL1wCAxgL2Mpz7eZbrb/JW

# XiOcNzDpQsmwGQ6Stw8tTCqPumhLRPb7YkzM8/6NnWH3T9ClmcGSF22LEyJYNWCH

# rQqYubNeKolzqUbCqhSqmr/UdUeb49zYHr7ALL8bAJyPDmubNqMtuaobKASBqP84

# uhqcRY/pjnYd+V5/dcu9ieERjiRKKsxCG1t6tG9oj7liwPddXEcYGOUiWLm742st

# 50jGwTzxbMpepmOP1mLnJskvZaN5e45NuzAHteORlsSuDt5t4BBRCJL+5EZnnw0e

# zntk9R8QJyAkL6/bAgMBAAGjggEWMIIBEjAfBgNVHSMEGDAWgBRTeb9aqitKz1SA

# 4dibwJ3ysgNmyzAdBgNVHQ4EFgQU9ndq3T/9ARP/FqFsggIv0Ao9FCUwDgYDVR0P

# AQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEwYDVR0lBAwwCgYIKwYBBQUHAwgw

# EQYDVR0gBAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwu

# dXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5

# LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVz

# ZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAA6+ZUHtaES45aHF1BGH5Lc7

# JYzrftrIF5Ht2PFDxKKFOct/awAEWgHQMVHol9ZLSyd/pYMbaC0IZ+XBW9xhdkkm

# UV/KbUOiL7g98M/yzRyqUOZ1/IY7Ay0YbMniIibJrPcgFp73WDnRDKtVutShPSZQ

# ZAdtFwXnuiWl8eFARK3PmLqEm9UsVX+55DbVIz33Mbhba0HUTEYv3yJ1fwKGxPBs

# P/MgTECimh7eXomvMm0/GPxX2uhwCcs/YLxDnBdVVlxvDjHjO1cuwbOpkiJGHmLX

# XVNbsdXUC2xBrq9fLrfe8IBsA4hopwsCj8hTuwKXJlSTrZcPRVSccP5i9U28gZ7O

# MzoJGlxZ5384OKm0r568Mo9TYrqzKeKZgFo0fj2/0iHbj55hc20jfxvK3mQi+H7x

# pbzxZOFGm/yVQkpo+ffv5gdhp+hv1GDsvJOtJinJmgGbBFZIThbqI+MHvAmMmkfb

# 3fTxmSkop2mSJL1Y2x/955S29Gu0gSJIkc3z30vU/iXrMpWx2tS7UVfVP+5tKuzG

# tgkP7d/doqDrLF1u6Ci3TpjAZdeLLlRQZm867eVeXED58LXd1Dk6UvaAhvmWYXoi

# Lz4JA5gPBcz7J311uahxCweNxE+xxxR3kT0WKzASo5G/PyDez6NHdIUKBeE3jDPs

# 2ACc6CkJ1Sji4PKWVT0/MYIGQTCCBj0CAQEwaDBUMQswCQYDVQQGEwJHQjEYMBYG

# A1UEChMPU2VjdGlnbyBMaW1pdGVkMSswKQYDVQQDEyJTZWN0aWdvIFB1YmxpYyBD

# b2RlIFNpZ25pbmcgQ0EgUjM2AhAVVO/doV4MRRGuXmkecKnEMA0GCWCGSAFlAwQC

# AQUAoIGEMBgGCisGAQQBgjcCAQwxCjAIoAKAAKECgAAwGQYJKoZIhvcNAQkDMQwG

# CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI

# hvcNAQkEMSIEIAhkS4wIxo7A2aevBBB+pCcK73k0AHmS324eHm83AumQMA0GCSqG

# SIb3DQEBAQUABIICAEqvLcC7Q2iTiWt0CGVHyvgOqST4b6eELhvDB/UpNSTuZpaD

# E089d+RfCA6Vx4sC9mVmHLe3e8RjzXMKn48Fti2nb7s/zkBzQtWS0ybxshjYxY8M

# bVcEpBFcFaz+XWvXgDF+uSK2ZH+ezZAsB3NcFHN+GSzW6sz4Iu0mksW3ks+j4GAm

# uiS70dT7sFXX2wjjwoRbvJhiJXdETtuFACAndMqisr8aPbMmts+X5HmR60KBawjf

# Ci2BRCrnlDUPat2GfEm49se1hp56beILh6xhPu9QeuEJWVYbUWC7rsA8VCP/aCXq

# DEFbznQNWpv95xSQJbRYamSrSCX5l265wAyjku5URXmknj/WZx1aJWkbALw9657W

# 7b2tjfJdlUsg+aVTTRNStt9Hk6TevL0sPoZGWi3KzyGaHps1xJS5vsyUUc6s3xIN

# PHRbU+ihFAuin1jS57fz0J0jHyfvBkFP6ZBt2Mxc1rQN4SUD9gL/+bKsVIFlZA62

# D/y95HE7QddYkG4/5zGOR99ihNlzFttgtiiy1Vh091cAxZhGwLWHuZ7xZTq8f0YY

# MNUE82DPdzAFkIFGXoPuL0NKalknEYWpLq2/VvtCoN6mSs4dFeNKfRo66oDSZcEl

# 8B1Rgrwlz9zIlr9UY+Hy5D5eRLKSd6kKnHzwXMkO3KSixJjIiLxMDtuYH4Q/oYID

# IzCCAx8GCSqGSIb3DQEJBjGCAxAwggMMAgEBMGowVTELMAkGA1UEBhMCR0IxGDAW

# BgNVBAoTD1NlY3RpZ28gTGltaXRlZDEsMCoGA1UEAxMjU2VjdGlnbyBQdWJsaWMg

# VGltZSBTdGFtcGluZyBDQSBSMzYCEQCkKTtuHt3XpzQIh616TrckMA0GCWCGSAFl

# AwQCAgUAoHkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx

# DxcNMjYwNjA2MDIwNjM4WjA/BgkqhkiG9w0BCQQxMgQwF+Z52YzAoB4hitLDTogi

# q+NBg464Ul3xsKS922UTzckbqN59sqOfVTn4y4EmjxU+MA0GCSqGSIb3DQEBAQUA

# BIICAM5Sc7w7Zs8cNvTmJd8LyKIZjF8d5XrQmgsapvq0OzDBykWLyDk3Q4ZxBaIe

# 7s01OW3FuEr17nQKG9oYVQjODHNQAA8OxFRniDfeDJlrGrw+CMzYTzSGRNXzqR2+

# J7TQntlzsvR/GghQ3e1allL4JQNlkaQsKN13E4e7OcHCrdwChb3UrW/FcWcPkJFw

# tcPFfRT76hrYxdw0DHjMh9mNEBlZub8iJgBpwq91CVE40qAEeSKavmWm/LLv7gGK

# 877UZSRrVyzYRLabR/ZA+PJD5G7ZGf7zTMjku/Bxqx8hOuUAMKUuxakGE3399Kn5

# sYvsrmmpaLwoGNRYsXuZdLqEqfrdQXiStgXR3b/GEJ0Z3o6r8z0X3twUuZDInEas

# Tts27ydT4f92yTgWudBemTPTsv1JV9t8Kj1Jo5yVUg/8XK2Eg28mHg87Z+qloJC2

# 8RtHiQIuHYHNI19EONAqEGBQPiNYxooNiB1YvKPoa89ZegfwolET6a9R12+6KFwO

# 78jrtruQek7jaNdSA7dYYHzpd512OBZ8JskW9jhnoyAi+G3tKu+x8IDKcgVkk2Fe

# J+czCIErOSyqJ5TLvGi2kKCdxkwt6Nk8XjwD9bsZzcuLlaPAF2DaY/AJmOd2nFyu

# F0utAouls9v3iXZJUWgSBSSMeX+GkV+ZMpG+pzshgUi/2X/i

# SIG # End signature block