This deployment template specifies an Azure Machine Learning workspace, and its associated resources including Azure Key Vault, Azure Storage, Azure Application Insights and Azure Container Registry. This configuration describes the set of resources you require to get started with Azure Machine Learning in a network isolated set up.
This Azure Resource Manager (ARM) template was created by a member of the community and not by Microsoft. Each ARM template is licensed to you under a licence agreement by its owner, not Microsoft. Microsoft is not responsible for ARM templates provided and licensed by community members and does not screen for security, compatibility or performance. Community ARM templates are not supported under any Microsoft support programme or service and are made available AS IS without warranty of any kind.
Parameters
| Parameter Name | Description |
|---|---|
| workspaceName | Specifies the name of the Azure Machine Learning workspace. |
| location | Specifies the location for workspace. |
| identityType | Specifies the identity type of the Azure Machine Learning workspace. |
| primaryUserAssignedIdentityResourceGroup | Specifies the resource group of user assigned identity that represents the Azure Machine Learing workspace. |
| primaryUserAssignedIdentityName | Specifies the name of user assigned identity that represents the Azure Machine Learing workspace. |
| cmkUserAssignedIdentityResourceGroup | Specifies the resource group of user assigned identity that needs to be used to access the key for encryption. |
| cmkUserAssignedIdentityName | Specifies the name of user assigned identity that needs to be used to access the key for encryption. |
| tagValues | Tags for workspace, will also be populated if provisioning new dependent resources. |
| storageAccountOption | Determines whether or not a new storage should be provisioned. |
| storageAccountName | Name of the storage account. |
| storageAccountType | (no description available) |
| storageAccountBehindVNet | Determines whether or not to put the storage account behind VNet |
| storageAccountResourceGroupName | Resource group name of the storage account if using existing one |
| keyVaultOption | Determines whether or not a new key vault should be provisioned. |
| keyVaultName | Name of the key vault. |
| keyVaultBehindVNet | Determines whether or not to put the storage account behind VNet |
| keyVaultResourceGroupName | Resource group name of the key vault if using existing one |
| applicationInsightsOption | Determines whether or not new ApplicationInsights should be provisioned. |
| applicationInsightsName | Name of ApplicationInsights. |
| applicationInsightsResourceGroupName | Resource group name of the application insights if using existing one. |
| containerRegistryOption | Determines whether or not a new container registry should be provisioned. |
| containerRegistryName | The container registry bind to the workspace. |
| containerRegistrySku | (no description available) |
| containerRegistryResourceGroupName | Resource group name of the container registry if using existing one. |
| containerRegistryBehindVNet | Determines whether or not to put container registry behind VNet. |
| vnetOption | Determines whether or not a new VNet should be provisioned. |
| vnetName | Name of the VNet |
| vnetResourceGroupName | Resource group name of the VNET if using existing one. |
| vnetLocation | Required if existing VNET location differs from workspace location |
| addressPrefixes | Address prefix of the virtual network |
| subnetOption | Determines whether or not a new subnet should be provisioned. |
| subnetName | Name of the subnet |
| subnetPrefix | Subnet prefix of the virtual network |
| adbWorkspace | Azure Databrick workspace to be linked to the workspace |
| confidential_data | Specifies that the Azure Machine Learning workspace holds highly confidential data. |
| encryption_status | Specifies if the Azure Machine Learning workspace should be encrypted with customer managed key. |
| cmk_keyvault | Specifies the customer managed keyVault arm id. Required when encryption is enabled |
| resource_cmk_uri | Specifies if the customer managed keyvault key uri. Required when encryption is enabled |
| privateEndpointType | (no description available) |
| encryption_cosmosdb_armid | Specifies customer managed cosmosDB for CMK workspace |
| encryption_storage_armid | Specifies customer managed storage for CMK workspace |
| encryption_search_armid | Specifies customer managed search for CMK workspace |
Use the template
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deploymentInstall and configure Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.machinelearningservices/machine-learning-workspace-vnet-v1-legacy-mode/azuredeploy.json
Command line
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deploymentInstall and Configure the Azure Cross-Platform Command-Line Interface
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.machinelearningservices/machine-learning-workspace-vnet-v1-legacy-mode/azuredeploy.json