refactor: Disable automation account by default (#980)

* Disable automation account by default

* Change output

* Generate Parameter Markdowns [oZakari/9361d324]

---------

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Author: oZakari

infra-as-code/bicep/modules/logging/generateddocs/logging.bicep.md

@@ -23,6 +23,7 @@ parLogAnalyticsWorkspaceSolutions | No       | Solutions that will be added to t
 parLogAnalyticsWorkspaceSolutionsLock | No       | Resource Lock Configuration for Log Analytics Workspace Solutions.  - `kind` - The lock settings of the service which can be CanNotDelete, ReadOnly, or None. - `notes` - Notes about this lock.  
 parUserAssignedManagedIdentityName | No       | Name of the User Assigned Managed Identity required for authenticating Azure Monitoring Agent to Azure.
 parUserAssignedManagedIdentityLocation | No       | User Assigned Managed Identity location.
+parAutomationAccountEnabled | No       | Switch to enable/disable Automation Account deployment.
 parLogAnalyticsWorkspaceLinkAutomationAccount | No       | Log Analytics Workspace should be linked with the automation account.
 parAutomationAccountName | No       | Automation account name.
 parAutomationAccountLocation | No       | Automation Account region name. - Ensure the regions selected is a supported mapping as per: https://docs.microsoft.com/azure/automation/how-to/region-mappings.
@@ -208,13 +209,21 @@ User Assigned Managed Identity location.
 
 - Default value: `[resourceGroup().location]`
 
+### parAutomationAccountEnabled
+
+![Parameter Setting](https://img.shields.io/badge/parameter-optional-green?style=flat-square)
+
+Switch to enable/disable Automation Account deployment.
+
+- Default value: `False`
+
 ### parLogAnalyticsWorkspaceLinkAutomationAccount
 
 ![Parameter Setting](https://img.shields.io/badge/parameter-optional-green?style=flat-square)
 
 Log Analytics Workspace should be linked with the automation account.
 
-- Default value: `True`
+- Default value: `False`
 
 ### parAutomationAccountName
 
@@ -409,8 +418,11 @@ outAutomationAccountId | string |
         "parUserAssignedManagedIdentityLocation": {
             "value": "[resourceGroup().location]"
         },
+        "parAutomationAccountEnabled": {
+            "value": false
+        },
         "parLogAnalyticsWorkspaceLinkAutomationAccount": {
-            "value": true
+            "value": false
         },
         "parAutomationAccountName": {
             "value": "alz-automation-account"

infra-as-code/bicep/modules/logging/logging.bicep

@@ -138,11 +138,15 @@ param parUserAssignedManagedIdentityName string = 'alz-logging-mi'
 @sys.description('User Assigned Managed Identity location.')
 param parUserAssignedManagedIdentityLocation string = resourceGroup().location
 
+@sys.description('Switch to enable/disable Automation Account deployment.')
+param parAutomationAccountEnabled bool = false
+
 @sys.description('Log Analytics Workspace should be linked with the automation account.')
-param parLogAnalyticsWorkspaceLinkAutomationAccount bool = true
+param parLogAnalyticsWorkspaceLinkAutomationAccount bool = false
 
 @sys.description('Automation account name.')
 param parAutomationAccountName string = 'alz-automation-account'
+
 @sys.description('Automation Account region name. - Ensure the regions selected is a supported mapping as per: https://docs.microsoft.com/azure/automation/how-to/region-mappings.')
 param parAutomationAccountLocation string = resourceGroup().location
 
@@ -190,7 +194,7 @@ resource resUserAssignedManagedIdentity 'Microsoft.ManagedIdentity/userAssignedI
   tags: parTags
 }
 
-resource resAutomationAccount 'Microsoft.Automation/automationAccounts@2023-11-01' = {
+resource resAutomationAccount 'Microsoft.Automation/automationAccounts@2024-10-23' = if (parAutomationAccountEnabled) {
   name: parAutomationAccountName
   location: parAutomationAccountLocation
   tags: parAutomationAccountTags
@@ -712,5 +716,5 @@ output outLogAnalyticsWorkspaceId string = resLogAnalyticsWorkspace.id
 output outLogAnalyticsCustomerId string = resLogAnalyticsWorkspace.properties.customerId
 output outLogAnalyticsSolutions array = parLogAnalyticsWorkspaceSolutions
 
-output outAutomationAccountName string = resAutomationAccount.name
-output outAutomationAccountId string = resAutomationAccount.id
+output outAutomationAccountName string = parAutomationAccountEnabled ? resAutomationAccount.id : 'AA Deployment Disabled'
+output outAutomationAccountId string = parAutomationAccountEnabled ? resAutomationAccount.id : 'AA Deployment Disabled'

infra-as-code/bicep/modules/logging/parameters/logging.parameters.all.json

@@ -34,8 +34,11 @@
     "parUserAssignedManagedIdentityName": {
       "value": "alz-umi-identity"
     },
+    "parAutomationAccountEnabled": {
+      "value": false
+    },
     "parLogAnalyticsWorkspaceLinkAutomationAccount": {
-      "value": true
+      "value": false
     },
     "parAutomationAccountName": {
       "value": "alz-automation-account"