This template shows how to put together the pieces to secure workloads using NSGs with Application Security Groups. It will deploy a Linux VM running NGINX and through the usage of Applicaton Security Groups on Network Security Groups we will allow access to ports 22 and 80 to a VM assigned to Application Security Group called webServersAsg.
此 Azure Resource Manager (ARM) 範本是由社群成員 (而非 Microsoft) 建立。每個 ARM 範本都是由其擁有者 (而非 Microsoft) 依據授權合約授權給您。Microsoft 並不負責社群成員所提供和授權的 ARM 範本，而不會為了安全性、相容性或效能進行篩選。社群 ARM 範本並未依據任何 Microsoft 支援方案或服務提供支援，而且會在沒有任何擔保的情況下依現況提供。
參數
| 參數名稱 | 說明 |
|---|---|
| _artifactsLocation | The base URI where artifacts required by this template are located. |
| _artifactsLocationSasToken | The sasToken required to access _artifactsLocation when they're located in a storage account with private access. |
| vmName | VM Name |
| vmSize | VM Size |
| adminUsername | Administrator name |
| location | Location for all resources. |
| authenticationType | Type of authentication to use on the Virtual Machine. SSH key is recommended. |
| adminPasswordOrKey | SSH Key or password for the Virtual Machine. SSH key is recommended. |
使用範本
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/201-application-security-group/azuredeploy.json
命令列
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure 跨平台命令列介面
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/201-application-security-group/azuredeploy.json