Az.HanaOnAzure

0.3.2

HanaOnAzure.Autorest/custom/New-AzSapMonitorProviderInstance.ps1

                                
# ----------------------------------------------------------------------------------

#

# Copyright Microsoft Corporation

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

# http://www.apache.org/licenses/LICENSE-2.0

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

# ----------------------------------------------------------------------------------

<#

.Synopsis

Creates a provider instance for the specified subscription, resource group, SapMonitor name, and resource name.

.Description

Creates a provider instance for the specified subscription, resource group, SapMonitor name, and resource name.

#>

function New-AzSapMonitorProviderInstance {

    [OutputType([Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Models.Api20200207Preview.IProviderInstance])]

    [CmdletBinding(DefaultParameterSetName = 'ByString', PositionalBinding = $false, SupportsShouldProcess, ConfirmImpact = 'Medium')]

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingPlainTextForPassword', 'HanaDatabasePasswordKeyVaultResourceId', Justification = 'Not a password')]

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingPlainTextForPassword', 'HanaDatabasePasswordSecretId', Justification = 'Not a password')]

    param(

        [Parameter(Mandatory)]

        [Alias('ProviderInstanceName')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Path')]

        [System.String]

        # Name of the provider instance.

        ${Name},

        [Parameter(Mandatory)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Path')]

        [System.String]

        # Name of the resource group.

        ${ResourceGroupName},

        [Parameter(Mandatory)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Path')]

        [System.String]

        # Name of the SAP monitor resource.

        ${SapMonitorName},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Path')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Runtime.DefaultInfo(Script = '(Get-AzContext).Subscription.Id')]

        [System.String]

        # Subscription ID which uniquely identify Microsoft Azure subscription.

        # The subscription ID forms part of the URI for every service call.

        ${SubscriptionId},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.Collections.Hashtable]

        # A JSON string containing metadata of the provider instance.

        ${Metadata},

        [Parameter(Mandatory)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.String]

        # The type of provider instance. Supported values are: "SapHana".

        ${ProviderType},

        [Parameter(ParameterSetName = 'ByString', Mandatory)]

        [Parameter(ParameterSetName = 'ByKeyVault', Mandatory)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.String]

        # The hostname of SAP HANA instance.

        ${HanaHostname},

        [Parameter(ParameterSetName = 'ByString', Mandatory)]

        [Parameter(ParameterSetName = 'ByKeyVault', Mandatory)]

        [Alias('HanaDbName')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.String]

        # The database name of SAP HANA instance.

        ${HanaDatabaseName},

        [Parameter(ParameterSetName = 'ByString', Mandatory)]

        [Parameter(ParameterSetName = 'ByKeyVault', Mandatory)]

        [Alias('HanaDbSqlPort')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.Int32]

        # The SQL port of the database of SAP HANA instance.

        ${HanaDatabaseSqlPort},

        [Parameter(ParameterSetName = 'ByString', Mandatory)]

        [Parameter(ParameterSetName = 'ByKeyVault', Mandatory)]

        [Alias('HanaDbUsername')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.String]

        # The username of the database of SAP HANA instance.

        ${HanaDatabaseUsername},

        [Parameter(ParameterSetName = 'ByDict', Mandatory)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.Collections.Hashtable]

        # The property of HANA instance.

        ${InstanceProperty},

        [Parameter(ParameterSetName = 'ByString', Mandatory)]

        [Alias('HanaDbPassword')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [SecureString]

        # The password of the database of SAP HANA instance.

        ${HanaDatabasePassword},

        [Parameter(ParameterSetName = 'ByKeyVault', Mandatory)]

        [Alias('HanaDbPasswordKeyVaultId', 'KeyVaultId')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.String]

        # Resource ID of the Key Vault that contains the HANA credentials.

        ${HanaDatabasePasswordKeyVaultResourceId},

        [Parameter(ParameterSetName = 'ByKeyVault', Mandatory)]

        [Alias('HanaDbPasswordSecretId', 'SecretId')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Body')]

        [System.String]

        # Secret identifier to the Key Vault secret that contains the HANA credentials.

        ${HanaDatabasePasswordSecretId},

        [Parameter()]

        [Alias('AzureRMContext', 'AzureCredential')]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Azure')]

        [System.Management.Automation.PSObject]

        # The credentials, account, tenant, and subscription used for communication with Azure.

        ${DefaultProfile},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Run the command as a job

        ${AsJob},

        [Parameter(DontShow)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Wait for .NET debugger to attach

        ${Break},

        [Parameter(DontShow)]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Runtime.SendAsyncStep[]]

        # SendAsync Pipeline Steps to be appended to the front of the pipeline

        ${HttpPipelineAppend},

        [Parameter(DontShow)]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Runtime.SendAsyncStep[]]

        # SendAsync Pipeline Steps to be prepended to the front of the pipeline

        ${HttpPipelinePrepend},

        [Parameter()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Run the command asynchronously

        ${NoWait},

        [Parameter(DontShow)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [System.Uri]

        # The URI for the proxy server to use

        ${Proxy},

        [Parameter(DontShow)]

        [ValidateNotNull()]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [System.Management.Automation.PSCredential]

        # Credentials for a proxy server to use for the remote call

        ${ProxyCredential},

        [Parameter(DontShow)]

        [Microsoft.Azure.PowerShell.Cmdlets.HanaOnAzure.Category('Runtime')]

        [System.Management.Automation.SwitchParameter]

        # Use the default credentials for the proxy

        ${ProxyUseDefaultCredentials}

    )

    process {

        $null = $PSBoundParameters.Remove('ResourceGroupName')

        $null = $PSBoundParameters.Remove('Name')

        $null = $PSBoundParameters.Remove('SapMonitorName')

        $null = $PSBoundParameters.Remove('ProviderType')

        $null = $PSBoundParameters.Remove('Metadata')

        $null = $PSBoundParameters.Remove('HanaHostname')

        $null = $PSBoundParameters.Remove('HanaDatabaseName')

        $null = $PSBoundParameters.Remove('HanaDatabaseSqlPort')

        $null = $PSBoundParameters.Remove('HanaDatabaseUsername')

        $null = $PSBoundParameters.Remove('HanaDatabasePasswordSecretId')

        $null = $PSBoundParameters.Remove('HanaDatabasePasswordKeyVaultResourceId')

        $null = $PSBoundParameters.Remove('Confirm')

        $null = $PSBoundParameters.Remove('WhatIf')

        $hasAsJob = $PSBoundParameters.Remove('AsJob')

        $parameterSet = $PSCmdlet.ParameterSetName

        switch ($parameterSet) {

            'ByString' {

                $null = $PSBoundParameters.Remove('HanaDatabasePassword')

                $property = @{

                    hanaHostname   = $HanaHostname

                    hanaDbName     = $HanaDatabaseName

                    hanaDbSqlPort  = $HanaDatabaseSqlPort

                    hanaDbUsername = $HanaDatabaseUsername

                    # To suppport descryption accross different platforms and PowerShell versions, we implement a script Unprotect-SecureString.ps1

                    # to convert securesting to plaintext

                    hanaDbPassword = . "$PSScriptRoot/../utils/Unprotect-SecureString.ps1" $HanaDatabasePassword

                }

            }

            'ByKeyVault' {

                # Referencing to CLI's implementation

                # https://github.com/Azure/azure-hanaonazure-cli-extension/blob/master/azext_hanaonazure/custom.py#L312-L338

                # 1. Get MSI

                $sapMonitor = Get-AzSapMonitor -ResourceGroupName $ResourceGroupName -Name $SapMonitorName @PSBoundParameters

                $managedResourceGroupName = $sapMonitor.ManagedResourceGroupName

                $sapMonitorId = $managedResourceGroupName.Split("-")[2]

                $msiName = "sapmon-msi-$sapMonitorId"

                $msi = Az.HanaOnAzure.internal\Get-AzUserAssignedIdentity -ResourceGroupName $managedResourceGroupName -ResourceName $msiName @PSBoundParameters

                # 2. Grant key vault access to MSI

                $null = $HanaDatabasePasswordKeyVaultResourceId -match "^/subscriptions/(?<subscriptionId>[^/]+)/resourceGroups/(?<resourceGroupName>[^/]+)/providers/Microsoft.KeyVault/vaults/(?<vaultName>[^/]+)$"

                $vaultSubscriptionId = $Matches['subscriptionId']

                $vaultResourceGroupName = $Matches['resourceGroupName']

                $vaultName = $Matches['vaultName']

                # Need to use vault's sub ID, not the sub ID of this cmdlet

                $null = $PSBoundParameters.Remove('SubscriptionId')

                $null = Az.HanaOnAzure.internal\Set-AzVaultAccessPolicy -OperationKind add -ResourceGroupName $vaultResourceGroupName -VaultName $vaultName -SubscriptionId $vaultSubscriptionId -AccessPolicy @{

                    ObjectId         = $msi.PrincipalId

                    TenantId         = (Get-AzContext).Tenant.Id

                    PermissionSecret = 'get'

                } @PSBoundParameters

                $PSBoundParameters.Add('SubscriptionId', $SubscriptionId)

                # Service accepts secret ID without port

                # but (Get-AzKeyVaultSecret).Id contains port (":443")

                # need to remove it

                $vaultPort = ":443"

                if ($HanaDatabasePasswordSecretId.Contains($vaultPort)) {

                    $HanaDatabasePasswordSecretId = $HanaDatabasePasswordSecretId.Replace($vaultPort, "")

                }

                $property = @{

                    hanaHostname                   = $HanaHostname

                    hanaDbName                     = $HanaDatabaseName

                    hanaDbSqlPort                  = $HanaDatabaseSqlPort

                    hanaDbUsername                 = $HanaDatabaseUsername

                    hanaDbPasswordKeyVaultUrl      = $HanaDatabasePasswordSecretId

                    keyVaultId                     = $HanaDatabasePasswordKeyVaultResourceId # key vault id is keyvault resource id

                    keyVaultCredentialsMsiClientID = $msi.ClientId # FIXME: this property is not needed in newer service backend, can we remove it?

                }

            }

            'ByDict' {

                $property = $InstanceProperty

                $null = $PSBoundParameters.remove('InstanceProperty')

            }

        }

        $PSBoundParameters.Add('ResourceGroupName', $ResourceGroupName)

        $PSBoundParameters.Add('Name', $Name)

        $PSBoundParameters.Add('SapMonitorName', $SapMonitorName)

        $PSBoundParameters.Add('ProviderType', $ProviderType)

        $PSBoundParameters.Add('Metadata', ($Metadata | ConvertTo-Json))

        $PSBoundParameters.Add('ProviderInstanceProperty', ($property | ConvertTo-Json))

        if ($hasAsJob) {

            $PSBoundParameters.Add('AsJob', $true)

        }

        if ($PSCmdlet.ShouldProcess("SAP monitor provider instance $Name", "Create")) {

            Az.HanaOnAzure.internal\New-AzSapMonitorProviderInstance @PSBoundParameters

        }

    }

}

# SIG # Begin signature block

# MIIoUgYJKoZIhvcNAQcCoIIoQzCCKD8CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDZIqQxCPUlKPua

# DTriFgWccPfTpS5KFv7mXmGpQr0a3qCCDYUwggYDMIID66ADAgECAhMzAAADri01

# UchTj1UdAAAAAAOuMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjMxMTE2MTkwODU5WhcNMjQxMTE0MTkwODU5WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQD0IPymNjfDEKg+YyE6SjDvJwKW1+pieqTjAY0CnOHZ1Nj5irGjNZPMlQ4HfxXG

# yAVCZcEWE4x2sZgam872R1s0+TAelOtbqFmoW4suJHAYoTHhkznNVKpscm5fZ899

# QnReZv5WtWwbD8HAFXbPPStW2JKCqPcZ54Y6wbuWV9bKtKPImqbkMcTejTgEAj82

# 6GQc6/Th66Koka8cUIvz59e/IP04DGrh9wkq2jIFvQ8EDegw1B4KyJTIs76+hmpV

# M5SwBZjRs3liOQrierkNVo11WuujB3kBf2CbPoP9MlOyyezqkMIbTRj4OHeKlamd

# WaSFhwHLJRIQpfc8sLwOSIBBAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUhx/vdKmXhwc4WiWXbsf0I53h8T8w

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwMTgzNjAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# AGrJYDUS7s8o0yNprGXRXuAnRcHKxSjFmW4wclcUTYsQZkhnbMwthWM6cAYb/h2W

# 5GNKtlmj/y/CThe3y/o0EH2h+jwfU/9eJ0fK1ZO/2WD0xi777qU+a7l8KjMPdwjY

# 0tk9bYEGEZfYPRHy1AGPQVuZlG4i5ymJDsMrcIcqV8pxzsw/yk/O4y/nlOjHz4oV

# APU0br5t9tgD8E08GSDi3I6H57Ftod9w26h0MlQiOr10Xqhr5iPLS7SlQwj8HW37

# ybqsmjQpKhmWul6xiXSNGGm36GarHy4Q1egYlxhlUnk3ZKSr3QtWIo1GGL03hT57

# xzjL25fKiZQX/q+II8nuG5M0Qmjvl6Egltr4hZ3e3FQRzRHfLoNPq3ELpxbWdH8t

# Nuj0j/x9Crnfwbki8n57mJKI5JVWRWTSLmbTcDDLkTZlJLg9V1BIJwXGY3i2kR9i

# 5HsADL8YlW0gMWVSlKB1eiSlK6LmFi0rVH16dde+j5T/EaQtFz6qngN7d1lvO7uk

# 6rtX+MLKG4LDRsQgBTi6sIYiKntMjoYFHMPvI/OMUip5ljtLitVbkFGfagSqmbxK

# 7rJMhC8wiTzHanBg1Rrbff1niBbnFbbV4UDmYumjs1FIpFCazk6AADXxoKCo5TsO

# zSHqr9gHgGYQC2hMyX9MGLIpowYCURx3L7kUiGbOiMwaMIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGiMwghofAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAAOuLTVRyFOPVR0AAAAA

# A64wDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIFP7

# LJa/tDnarG/AH8WZR82ollfPprbU9HllxZDwOdVSMEIGCisGAQQBgjcCAQwxNDAy

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20wDQYJKoZIhvcNAQEBBQAEggEAJ82JmDxuD8Xi3UQiqtMotkJ3UT75BjsjUn8H

# 8v++/hhwlZbmL8PTbyddQliwESsvwwBIyUg1rs2gsh+oRk9w0jG9BuG7v7LQYIwa

# eAQSe2uZZrB4djiLAKleGT1PoedeY9eL0rLsTavWVgc5lD4Z22vTCTjiClx5G2Xo

# mrr5B6VRi+SH0hZcicKi+Vyyq9m63Wp4KuZozfZtLR0axO2rY7o5P2Zk19g0gyh+

# 5lUNR4GX0dYZQs1PA5icm/AGg1ZzAygPkcQLiSrkWLaW7tlqPQGOxoEXmQF0Yxbj

# ZiowfuZHRHrCiUTQpjKHhuO45+pHqBvqaRPo8wppD4bHgnY0lqGCF60wghepBgor

# BgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheCAgEDMQ8wDQYJYIZI

# AWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIBQQIBAQYKKwYBBAGE

# WQoDATAxMA0GCWCGSAFlAwQCAQUABCAA4CGa7NZo1EBMvmhshn2YECBRJ7kxc9Es

# PT3rTJpYyAIGZsZkXLgnGBMyMDI0MDgyOTAzMDgyNi42MDFaMASAAgH0oIHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjo0QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKADAgECAhMzAAAB/xI4

# fPfBZdahAAEAAAH/MA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1w

# IFBDQSAyMDEwMB4XDTI0MDcyNTE4MzExOVoXDTI1MTAyMjE4MzExOVowgdMxCzAJ

# BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k

# MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTArBgNVBAsTJE1pY3Jv

# c29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUGA1UECxMeblNoaWVs

# ZCBUU1MgRVNOOjRDMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGlt

# ZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA

# yeiV0pB7bg8/qc/mkiDdJXnzJWPYgk9mTGeI3pzQpsyrRJREWcKYHd/9db+g3z4d

# U4VCkAZEXqvkxP5QNTtBG5Ipexpph4PhbiJKwvX+US4KkSFhf1wflDAY1tu9CQqh

# hxfHFV7vhtmqHLCCmDxhZPmCBh9/XfFJQIUwVZR8RtUkgzmN9bmWiYgfX0R+bDAn

# ncUdtp1xjGmCpdBMygk/K0h3bUTUzQHb4kPf2ylkKPoWFYn2GNYgWw8PGBUO0vTM

# KjYD6pLeBP0hZDh5P3f4xhGLm6x98xuIQp/RFnzBbgthySXGl+NT1cZAqGyEhT7L

# 0SdR7qQlv5pwDNerbK3YSEDKk3sDh9S60hLJNqP71iHKkG175HAyg6zmE5p3fONr

# 9/fIEpPAlC8YisxXaGX4RpDBYVKpGj0FCZwisiZsxm0X9w6ZSk8OOXf8JxTYWIqf

# RuWzdUir0Z3jiOOtaDq7XdypB4gZrhr90KcPTDRwvy60zrQca/1D1J7PQJAJObbi

# aboi12usV8axtlT/dCePC4ndcFcar1v+fnClhs9u3Fn6LkHDRZfNzhXgLDEwb6dA

# 4y3s6G+gQ35o90j2i6amaa8JsV/cCF+iDSGzAxZY1sQ1mrdMmzxfWzXN6sPJMy49

# tdsWTIgZWVOSS9uUHhSYkbgMxnLeiKXeB5MB9QMcOScCAwEAAaOCAUkwggFFMB0G

# A1UdDgQWBBTD+pXk/rT/d7E/0QE7hH0wz+6UYTAfBgNVHSMEGDAWgBSfpxVdAF5i

# XYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jv

# c29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENB

# JTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRw

# Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRp

# bWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBYGA1Ud

# JQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDANBgkqhkiG9w0BAQsF

# AAOCAgEAOSNN5MpLiyunm866frWIi0hdazKNLgRp3WZPfhYgPC3K/DNMzLliYQUA

# p6WtgolIrativXjOG1lIjayG9r6ew4H1n5XZdDfJ12DLjopap5e1iU/Yk0eutPyf

# OievfbsIzTk/G51+uiUJk772nVzau6hI2KGyGBJOvAbAVFR0g8ppZwLghT4z3mkG

# Zjq/O4Z/PcmVGtjGps2TCtI4rZjPNW8O4c/4aJRmYQ/NdW91JRrOXRpyXrTKUPe3

# kN8N56jpl9kotLhdvd89RbOsJNf2XzqbAV7XjV4caCglA2btzDxcyffwXhLu9HMU

# 3dLYTAI91gTNUF7BA9q1EvSlCKKlN8N10Y4iU0nyIkfpRxYyAbRyq5QPYPJHGA0T

# y0PD83aCt79Ra0IdDIMSuwXlpUnyIyxwrDylgfOGyysWBwQ/js249bqQOYPdpyOd

# gRe8tXdGrgDoBeuVOK+cRClXpimNYwr61oZ2/kPMzVrzRUYMkBXe9WqdSezh8tyt

# uulYYcRK95qihF0irQs6/WOQJltQX79lzFXE9FFln9Mix0as+C4HPzd+S0bBN3A3

# XRROwAv016ICuT8hY1InyW7jwVmN+OkQ1zei66LrU5RtAz0nTxx5OePyjnTaItTS

# Y4OGuGU1SXaH49JSP3t8yGYA/vorbW4VneeD721FgwaJToHFkOIwggdxMIIFWaAD

# AgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD

# VQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEe

# MBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYDVQQDEylNaWNyb3Nv

# ZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAeFw0yMTA5MzAxODIy

# MjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw

# MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGmTOe0ciELeaLL1yR5

# vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/HZveVU3Fa4n5KWv64

# NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDcwUTIcVxRMTegCjhu

# je3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62AW36MEBydUv626GIl

# 3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1wjjHINSi947SHJMPg

# yY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCGMFxPLOJiss254o2I

# 5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ1v2lIH1+/NmeRd+2

# ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP8BDyt0cY7afomXw/

# TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFzymeiXtcodgLiMxhy

# 16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHzNgY1GIRH29wb0f2y

# 1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3xwgVGD94q0W29R6H

# XtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsGAQQBgjcVAQQFAgMB

# AAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/LwTuMB0GA1UdDgQW

# BBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEGDCsGAQQBgjdMg30B

# ATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz

# L0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYBBQUHAwgwGQYJKwYB

# BAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMB

# Af8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQwVgYDVR0fBE8wTTBL

# oEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv

# TWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUFBwEBBE4wTDBKBggr

# BgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNS

# b29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQELBQADggIBAJ1Vffwq

# reEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfCcTY/2mRsfNB1OW27

# DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AFvonoaeC6Ce5732pv

# vinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l9qRWqveVtihVJ9Ak

# vUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn8AtqgcKBGUIZUnWK

# NsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5mO0+7hvoyGtmW9I/2

# kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyxTkctwRQEcb9k+SS+

# c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4S5pu+yFUa2pFEUep

# 8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9y8FBSX5+k77L+Dvk

# txW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM+Zv/Cuk0+CQ1Zyvg

# DbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhwRNGQ8cirOoo6CGJ/

# 2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4CAQEwggEBoYHZpIHW

# MIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMS0wKwYDVQQL

# EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxJzAlBgNVBAsT

# Hm5TaGllbGQgVFNTIEVTTjo0QzFBLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9z

# b2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIaAxUAqROMbMS8JcUl

# cnPkwRLFRPXFspmggYMwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz

# aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv

# cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx

# MDANBgkqhkiG9w0BAQsFAAIFAOp6HQ0wIhgPMjAyNDA4MjgyMjAyNTNaGA8yMDI0

# MDgyOTIyMDI1M1owdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA6nodDQIBADAHAgEA

# AgIr1TAHAgEAAgITtDAKAgUA6ntujQIBADA2BgorBgEEAYRZCgQCMSgwJjAMBgor

# BgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0GCSqGSIb3DQEBCwUA

# A4IBAQBVvBBlkleerumg1qe1pJ5XlCyb5b8g5Sv2/qLN6OtptSFB1r/2WkECBZDf

# fn0Lv6g6sHUkiGEz/7sQ5gPRoy2f8QbthJPzapeMvie920DdrOeKLjigghTEX25L

# huxiOmvqIfPisGgZOqw9ejGMdJXKuLTxTHBQgVxXao9Kj4HT5n4KnnNowTy5gGAY

# 7QfeAiWp7ZFUp12ggMLc2q0xKZrVnwKA75hN805JSYkLorp/cGVhkUll9O766ocv

# P2RPuKuKUtwLt0HXCgAqyOkBUYP/tQLtTdhj63F8N3P9LQ9SjRm9G7ElEDWRMvgp

# SLXtsWjEiestFGJ9DSHnxOMPn+v2MYIEDTCCBAkCAQEwgZMwfDELMAkGA1UEBhMC

# VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV

# BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp

# bWUtU3RhbXAgUENBIDIwMTACEzMAAAH/Ejh898Fl1qEAAQAAAf8wDQYJYIZIAWUD

# BAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAvBgkqhkiG9w0B

# CQQxIgQgnlZOgYsAXc7kB4EAkKYyeoYs8hEO2S6HOIqNIV5WKAUwgfoGCyqGSIb3

# DQEJEAIvMYHqMIHnMIHkMIG9BCDkMu++yQJ3aaycIuMT6vA7JNuMaVOI3qDjSEV8

# upyn/TCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u

# MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp

# b24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAAB

# /xI4fPfBZdahAAEAAAH/MCIEIAt5W8Qs3f3l3tHinmJqXaLdr3QxHYo6rCDcts+J

# e+qwMA0GCSqGSIb3DQEBCwUABIICABeVitfcVW7t01W8HchzUFSQuPUU09UoePV5

# Pu463AM5GbHx/DCM9iml7nd+cxMHAA2loQoCN+9wKOep9DFxzp7M/odVsAuYsbbq

# 7MKYU0gMurmWftwLMeuhorWFji0IZEJtuQLadgfJ8YeEVs/eDRscvYAeoCbCJrrF

# k6mbEIGVrDxhx3FeUcJz6Bws72R3KfIeG/+oXlPBk3WyM7w9gNN7D7AY3RiZUpwl

# sl7lLdQQ7iC8AZ87xFiOZVWzbBAVlSsZNyqVThOuIHkHQOhaj0vZuUDkufJyZSM7

# avXvcuQShojQqHU7sRwGohmo99zMVZzvmcTvzFBa+EFo1Holbc/cxqMvAV+z6YTZ

# rA2SWeoJiCW0HH3g58HD/UFAU1sq13gnyV8u48DxOAUIfQH+7wZnDzwy1zDcttAB

# P4YMcnNEhH6xxDXBccHQbQOlMnzt21V3WIW/BOV62VC60ufl1Te4Vp1b+xC+DEnt

# 51B5/NuIKvYBoxQUEmYTLTv+4TroVS45MLxtnccbHWJmboIJD7B23ZxNluf5cXkF

# 9W4Pea90E7i2XVYh7RwIjeZIwmEiwY3AO05WGwi/fw2W3XkYcB56g/4xrjeOKspI

# wQjuNNhJuMtg0Nhgj1Ll3JeJYfx+3GABM6x516p2mA2FlBZKsJ4poERTt9bkdd88

# PTERZtJ3

# SIG # End signature block