Manbearpiet

$invokeAzRestMethodSplat = @{
    Path = "/subscriptions/cceb1495-9940-4f29-abef-8fef7540161d/resourceGroups/DefaultResourceGroup-WEU/providers/Microsoft.Authorization/roleAssignments/$((New-Guid).Guid)?api-version=2022-04-01"
    Method = 'PUT'
    Payload = (
      @{
        properties = @{
          roleDefinitionId                   = '/subscriptions/cceb1495-9940-4f29-abef-8fef7540161d/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7' # The only allowed roledefinitions are those under the lighthouse offer under delegatedRoleDefinitionIds
          principalId                        = '3cb5e715-bb86-41b3-a240-1468814d0eb0' # Not the client ID but the OBJECT ID of the service principal
          principalType                      = 'ServicePrincipal' # this must be a Service Principal else it won't work
          delegatedManagedIdentityResourceId = '/subscriptions/cceb1495-9940-4f29-abef-8fef7540161d/resourceGroups/DefaultResourceGroup-WEU/providers/Microsoft.Managed

Manbearpiet

Here are PowerShell examples that align with NASA’s “Power of 10” coding principles:

1. Avoid Complex Control Flow (No goto or Recursion)

PowerShell doesn’t support goto, but recursion should be avoided.

❌ Bad Example (Recursion)

function Get-Factorial {
 param ([int]$n)

Manbearpiet

@description('The name of the diagnostic setting')
param diagnosticSettingName string = 'AuditAndHealthMonitoring'

@description('The Log Analytics workspace ID where diagnostics will be sent')
param workspaceResourceId string

resource reslogAnalyticsWorkspace 'Microsoft.OperationalInsights/workspaces@2020-10-01' existing = {
  name: split(workspaceResourceId, '/')[8]
}

Manbearpiet

$ast = [System.Management.Automation.Language.Parser]::ParseFile('C:\Temp\src\common\common.ps1', [ref]$null, [ref]$null)
$configurations = $ast.FindAll({ $args[0] -is [System.Management.Automation.Language.ConfigurationDefinitionAst] }, $false)
$objectstable = $configurations.Extent.text | ForEach-Object {
    ConvertTo-DSCObject -Content $_
}
$objectstable | Group-Object -Property ResourceName | ConvertTo-Json -Depth 10

Manbearpiet

---

author: "Christian Piet" title: "How to work with error in PowerShell" date: 2024-11-20T20:00:00.0000000+01:00 draft: true description: "An basic course in PowerShell errors" tags: - errors series: powershell aliases:

Manbearpiet

resources
| where location != "global"
| join (
resourcecontainers
| where ['type'] =~ 'microsoft.resources/subscriptions/resourcegroups'
| project resourceGroup, location,subscriptionId
) on resourceGroup, subscriptionId
| where location != location1

Manbearpiet

Get Pull Requests using GH's GraphQL API

How to get Pull Requests data using Github in the browser, or using the API to allow for automating reporting or building in values into a website.

Resources

• GitHub GQL API: https://developer.github.com/v4/
• Explorer: https://developer.github.com/v4/explorer/
• Github community topics - these were used to understand the syntax needed.

Manbearpiet

#requires -version 7
#You can load this script with $(iwr https://tinyurl.com/TraceAICommand | iex)
using namespace Microsoft.ApplicationInsights
using namespace Microsoft.ApplicationInsights.Extensibility
using namespace Microsoft.ApplicationInsights.DataContracts
using namespace System.Management.Automation
using namespace System.Collections.Generic
using namespace System.Net

#Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/console

Manbearpiet

[CmdletBinding()]
param (
    [Parameter()]
    [Int32]
    $DaysToExpiration
)

$certs = Get-AzWebAppCertificate

$certs | Where-Object ExpirationDate -LE (get-date).AddDays($DaysToExpiration) | Select-Object name,Issuer,SubjectName,Thumbprint,ExpirationDate