ALZ-Bicep/.github/scripts/mc-Wipe-AlzTenant.ps1

[CmdletBinding()]
param (
    #Added this back into parameters as error occurs if multiple tenants are found when using Get-AzTenant
    [Parameter(Mandatory = $true, Position = 1, HelpMessage = "Please the Insert Tenant ID (GUID) of your Microsoft Entra ID tenant e.g.'f73a2b89-6c0e-4382-899f-ea227cd6b68f'")]
    [string]
    $tenantRootGroupID = "<Insert the Tenant ID (GUID) of your Microsoft Entra ID tenant>",

    [Parameter(Mandatory = $true, Position = 2, HelpMessage = "Insert the name of your intermediate root Management Group e.g. 'Contoso'")]
    [string]
    $intermediateRootGroupID = "<Insert the name of your intermediate root Management Group e.g. Contoso>",

    [Parameter(Mandatory = $true, Position = 4, HelpMessage = "Insert the subscription name of the subscription to wipe e.g. sub-unit-test-pr-108")]
    [string]
    $subscriptionName = "<Insert the subscription Id of the subscription to wipe e.g. sub-unit-test-pr-108>"
)


# Start timer
$StopWatch = New-Object -TypeName System.Diagnostics.Stopwatch
$StopWatch.Start()

$subToMove = Get-AzSubscription -SubscriptionName $subscriptionName

if ($subToMove.State -ne "Disabled") {
    Write-Output "Moving Subscription: '$($subscriptionName)' under Tenant Root Management Group: '$tenantRootGroupID'"
    New-AzManagementGroupSubscription -GroupId $tenantRootGroupID -SubscriptionId $subToMove.Id
}


# For each Subscription in the Intermediate Root Management Group's hierarchy tree, remove all Resources, Resource Groups and Deployments
Write-Output "Removing all Azure Resources, Resource Groups and Deployments from subscription $($subscriptionName)"
Write-Output "Set context to SubscriptionId: '$($subToMove.Id)'"
Set-AzContext -Subscription $subToMove.Id #| Out-Null

# Get all Resource Groups in Subscription
$resources = Get-AzResourceGroup

$resources | ForEach-Object -Parallel {
    Write-Output "Deleting  $($_.ResourceGroupName) ..."
    Remove-AzResourceGroup -Name $_.ResourceGroupName -Force | Out-Null
}

# Get Deployments for Subscription
$subDeployments = Get-AzSubscriptionDeployment

Write-Output "Removing All Subscription Deployments for: $($subscriptionName)"

# For each Subscription level deployment, remove it
$subDeployments | ForEach-Object -Parallel {
    Write-Output "Removing $($_.DeploymentName) ..."
    Remove-AzSubscriptionDeployment -Id $_.Id
}


# Get all Microsoft Entra ID Tenant level deployments
$tenantDeployments = Get-AzTenantDeployment | Where-Object { $PSItem.DeploymentName -like "$intermediateRootGroupID*" }

Write-Output "Removing all Tenant level deployments prefixed with $intermediateRootGroupID"

# For each Microsoft Entra ID Tenant level deployment, remove it
$tenantDeployments | ForEach-Object -Parallel {
    Write-Output "Removing $($_.DeploymentName) ..."
    Remove-AzTenantDeployment -Id $_.Id
}

# This function only deletes Management Groups in the Intermediate Root Management Group's hierarchy tree and will NOT delete other Intermediate Root level Management Groups and their children e.g. in the case of "canary"
function Remove-Recursively {
    [CmdletBinding(SupportsShouldProcess)]
    param($name)
    # Enters the parent Level
    Write-Output "Entering the scope with $name"
    $parent = Get-AzManagementGroup -GroupId $name -Expand -Recurse

    # Checks if there is any parent level
    if ($null -ne $parent.Children) {
        Write-Output "Found the following Children :"
        Write-Output ($parent.Children | Select-Object Name).Name

        foreach ($children in $parent.Children) {
            # Tries to recur to each child item
            if ($PSCmdlet.ShouldProcess($children.Name)) {
                Remove-Recursively($children.Name)
            }
        }
    }

    # If no children are found at each scope
    Write-Output "No children found in scope $name"
    Write-Output "Removing the scope $name"

    Remove-AzManagementGroup -InputObject $parent -ErrorAction SilentlyContinue
}

# Remove all the Management Groups in Intermediate Root Management Group's hierarchy tree, including itself
Remove-Recursively($intermediateRootGroupID)

# Stop timer
$StopWatch.Stop()

# Display timer output as table
Write-Output "Time taken to complete task:"
$StopWatch.Elapsed | Format-Table