Deploy the ISO 27001 App Service Environment/SQL Database workload blueprint sample

To deploy the Azure Blueprints ISO 27001 App Service Environment/SQL Database workload blueprint sample, the following steps must be taken:

If you don't have an Azure subscription, create a free account before you begin.

Deploy the ISO 27001 Shared Services blueprint sample

Before this blueprint sample can be deployed, the ISO 27001 Shared Services blueprint sample must be deployed to the target subscription. Without a successful deployment of the ISO 27001 Shared Services blueprint sample, this blueprint sample will be missing infrastructure dependencies and fail during deployment.

Create blueprint from sample

First, implement the blueprint sample by creating a new blueprint in your environment using the sample as a starter.

1. Select All services in the left pane. Search for and select Blueprints.

2. From the Getting started page on the left, select the Create button under Create a blueprint.

3. Find the ISO 27001: ASE/SQL Workload blueprint sample under Other Samples and select Use this sample.

4. Enter the Basics of the blueprint sample:

   • Blueprint name: Provide a name for your copy of the ISO 27001 ASE/SQL workload blueprint sample.
   • Definition location: Use the ellipsis and select the management group to save your copy of the sample to.

5. Select the Artifacts tab at the top of the page or Next: Artifacts at the bottom of the page.

6. Review the list of artifacts that make up the blueprint sample. Many of the artifacts have parameters that we'll define later. Select Save Draft when you've finished reviewing the blueprint sample.

Publish the sample copy

Your copy of the blueprint sample has now been created in your environment. It's created in Draft mode and must be Published before it can be assigned and deployed. The copy of the blueprint sample can be customized to your environment and needs, but that modification may move it away from the ISO 27001 standard.

1. Select All services in the left pane. Search for and select Blueprints.

2. Select the Blueprint definitions page on the left. Use the filters to find your copy of the blueprint sample and then select it.

3. Select Publish blueprint at the top of the page. In the new page on the right, provide a Version for your copy of the blueprint sample. This property is useful for if you make a modification later. Provide Change notes such as "First version published from the ISO 27001 blueprint sample." Then select Publish at the bottom of the page.

Assign the sample copy

Once the copy of the blueprint sample has been successfully Published, it can be assigned to a subscription within the management group it was saved to. This step is where parameters are provided to make each deployment of the copy of the blueprint sample unique.

1. Select All services in the left pane. Search for and select Blueprints.

2. Select the Blueprint definitions page on the left. Use the filters to find your copy of the blueprint sample and then select it.

3. Select Assign blueprint at the top of the blueprint definition page.

4. Provide the parameter values for the blueprint assignment:

   • Basics

     • Subscriptions: Select one or more of the subscriptions that are in the management group you saved your copy of the blueprint sample to. If you select more than one subscription, an assignment will be created for each using the parameters entered.
     • Assignment name: The name is pre-populated for you based on the name of the blueprint. Change as needed or leave as is.
     • Location: Select a region for the managed identity to be created in. Azure Blueprints uses this managed identity to deploy all artifacts in the assigned blueprint. To learn more, see managed identities for Azure resources.
     • Blueprint definition version: Pick a Published version of your copy of the blueprint sample.

   • Lock Assignment

     Select the blueprint lock setting for your environment. For more information, see blueprints resource locking.

   • Managed Identity

     Leave the default system assigned managed identity option.

   • Blueprint parameters

     The parameters defined in this section are used by many of the artifacts in the blueprint definition to provide consistency.

     • Organization name: Enter a short-name for your organization. This property is primarily used for naming resources.
     • Shared Service Subscription ID: Subscription ID where the ISO 27001 Shared Services blueprint sample is assigned.
     • Default subnet address prefix: The CIDR notation for the virtual network default subnet. Default value is 10.1.0.0/24.
     • Workload location: Determines what location the artifacts are deployed to. Not all services are available in all locations. Artifacts deploying such services provide a parameter option for the location to deploy that artifact to.

   • Artifact parameters

     The parameters defined in this section apply to the artifact under which it's defined. These parameters are dynamic parameters since they're defined during the assignment of the blueprint. For a full list or artifact parameters and their descriptions, see Artifact parameters table.

5. Once all parameters have been entered, select Assign at the bottom of the page. The blueprint assignment is created and artifact deployment begins. Deployment takes roughly an hour. To check on the status of deployment, open the blueprint assignment.

Artifact parameters table

The following table provides a list of the blueprint artifact parameters:

Next steps

Now that you've reviewed the steps to deploy the ISO 27001 App Service Environment/SQL Database workload blueprint sample, visit the following articles to learn about the architecture and control mapping:

Additional articles about blueprints and how to use them:

• Learn about the blueprint lifecycle.
• Understand how to use static and dynamic parameters.
• Learn to customize the blueprint sequencing order.
• Find out how to make use of blueprint resource locking.
• Learn how to update existing assignments.