Enforce HTTPS and OAuth auth on storage account #7

	name: Deploy resources
	on:
	push:
	workflow_dispatch:
	permissions:
	id-token: write
	contents: read
	jobs:
	deploy-dev:
	environment: dev
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@main

	- name: Log into Azure
	uses: azure/login@v1
	with:
	client-id: ${{ secrets.AZURE_RG_DEV_CLIENT_ID }}
	tenant-id: ${{ secrets.AZURE_TENANT_ID }}
	subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
	enable-AzPSSession: true

	- name: Deploy resources DEV
	uses: azure/powershell@v1
	with:
	inlineScript: \|
	$ParamsDev = @{
	TemplateFilePath = "./src/infra/vm-start-stop.bicep"
	TemplateParameterFilePath = "./src/infra/vm-start-stop.dev.bicepparam"
	ResourceGroupName = "eit-vms-plc-dev-rg-1"
	}

	./src/scripts/Deploy-ToResourceGroup.ps1 @ParamsDev
	azPSVersion: "11.4.0"

	# deploy-prd:
	# environment: prd
	# if: github.ref == 'refs/heads/main'
	# runs-on: ubuntu-latest
	# steps:
	# - name: Checkout code
	# uses: actions/checkout@main

	# - name: Log into Azure
	# uses: azure/login@v1
	# with:
	# client-id: ${{ secrets.AZURE_CLIENT_ID }}
	# tenant-id: ${{ secrets.AZURE_TENANT_ID }}
	# subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
	# enable-AzPSSession: true

	# - name: Deploy PROD resource group
	# uses: azure/powershell@v1
	# with:
	# inlineScript: \|
	# $ParamsProd = @{
	# TemplateFilePath = "./src/infra/resourceGroup.bicep"
	# TemplateParameterFilePath = "./src/infra/resourceGroup.prd.bicepparam"
	# }

	# ./src/scripts/Deploy-ToSubscription.ps1 @ParamsProd
	# azPSVersion: "11.4.0"

Provide feedback