destroy-simplechat.ps1

<#
How to authenticate before running this script:

Azure Government:
az cloud set --name AzureUSGovernment
az login --scope https://management.core.usgovcloudapi.net//.default
az login --scope https://graph.microsoft.us//.default

Azure Commercial:
az cloud set --name AzureCloud
az login --scope https://management.azure.com//.default
az login --scope https://graph.microsoft.com//.default

Cleanup scope note:
- This script deletes the Simple Chat resource group and Entra objects created by the Azure CLI deployer.
- If the deployment reused an existing VNet, existing subnets, or customer-managed private DNS zones outside the deployment resource group, this script does not delete those shared resources.
- Any private networking resources created inside the Simple Chat deployment resource group are removed when the resource group is deleted.
#>

param (
    [Parameter(Mandatory = $true)]
    [string]$p,

    [Parameter(Mandatory = $true)]
    [string]$e
)

# Mofify these values
$productName = $p
$productEnvironment = $e

# No not modify values
$appPrefix ="sc"
$resourceGroupName = "{0}-{1}-{2}-rg" -f $appPrefix, $productName, $productEnvironment
$entraGroupName = "{0}-{1}-sg" -f $productName, $productEnvironment
$appRegistrationName = "{1}-{2}-ar" -f $appPrefix, $productName, $productEnvironment
$entraGroupName_Admins = $entraGroupName + "-Admins"
$entraGroupName_Users = $entraGroupName + "-Users"
$entraGroupName_CreateGroup = $entraGroupName + "-CreateGroup"
$entraGroupName_SafetyViolationAdmin = $entraGroupName + "-SafetyViolationAdmin"
$entraGroupName_FeedbackAdmin = $entraGroupName + "-FeedbackAdmin"
$entraGroupName_CreatePublicWorkspace = $entraGroupName + "-CreatePublicWorkspace"
$entraSecurityGroupNames = @($entraGroupName_Admins, $entraGroupName_Users, $entraGroupName_CreateGroup, $entraGroupName_SafetyViolationAdmin, $entraGroupName_FeedbackAdmin, $entraGroupName_CreatePublicWorkspace)

$currentCloudName = az cloud show --query "name" --output tsv
if ($LASTEXITCODE -ne 0 -or [string]::IsNullOrWhiteSpace($currentCloudName)) {
    Write-Error "Failed to determine the active Azure cloud from Azure CLI."
    exit 1
}

if ($currentCloudName -eq "AzureUSGovernment") {
    $armResource = "https://management.core.usgovcloudapi.net/"
    $graphResource = "https://graph.microsoft.us/"
} elseif ($currentCloudName -eq "AzureCloud") {
    $armResource = "https://management.azure.com/"
    $graphResource = "https://graph.microsoft.com/"
} else {
    Write-Error "Unsupported Azure cloud '$currentCloudName'. Switch to AzureCloud or AzureUSGovernment before running this script."
    exit 1
}

# --- Destroy Instance ---
cls
Write-Host "`nSimpleChat Destroy Executing:" -ForegroundColor Green
Write-Host "Active Azure cloud: $currentCloudName" -ForegroundColor Green

Write-Host "`nHow to run this script: ./destroy-simplechat.ps1 -p <productName> -e <environment>" -ForegroundColor Yellow
Write-Host "`nCleanup note: shared VNets, shared subnets, and customer-managed private DNS zones reused by the deployment are not deleted by this script." -ForegroundColor Yellow

Write-Host "`nGetting Access Tokeen Refreshed for: $armResource" -ForegroundColor Yellow
az account get-access-token --resource $armResource --output none
if ($LASTEXITCODE -ne 0) { Write-Error "Failed to get ARM  Access Token." ; exit 1 } # Basic error check
Write-Host "`nGetting Access Tokeen Refreshed for: $graphResource" -ForegroundColor Yellow
az account get-access-token --resource $graphResource --output none
if ($LASTEXITCODE -ne 0) { Write-Error "Failed to get MSGraph Access Token." ; exit 1 } # Basic error check

Read-Host -Prompt "Press Enter to delete all created resources in group '$($resourceGroupName)' (or Ctrl+C to exit)"
Write-Host "Deleting Resource Group: $($resourceGroupName)..."
az group delete --name $resourceGroupName --yes --no-wait
if ($LASTEXITCODE -ne 0) { Write-Warning "Failed to delete Resource Group." }
else { Write-Host "Resource Group '$($resourceGroupName)' deletion initiated." }

foreach ($securityGroupName in $entraSecurityGroupNames) {
    Write-Host "`nChecking if exists Security Group: $($securityGroupName)..." -ForegroundColor Yellow
    $entraGroup = az ad group show --group $securityGroupName --query "id" -o tsv 2>$null
    if (-not $entraGroup) {
        Write-Host "Entra ID Security Group '$($securityGroupName)' does not exist."
    } else {
        Write-Host "Attempting to delete Entra ID Security Group: $($securityGroupName)..."
        az ad group delete --group $securityGroupName
        if ($LASTEXITCODE -ne 0) { Write-Warning "Failed to delete Entra ID Security Group '$($securityGroupName)'."}
        else { Write-Host "Entra ID Security Group '$($securityGroupName)' deleted."}
    }
}

Write-Host "`nAttempting to delete Entra Application Registration: [$($appRegistrationName)]..." -ForegroundColor Yellow
$clientId = $(az ad app list --display-name $appRegistrationName --query "[0].appId" --output tsv)
if ($LASTEXITCODE -ne 0) { Write-Warning "Failed to get Entra App Registration." }
else { Write-Host "Deleting Entra App Registration '$($appRegistrationName)'." }

if ($clientId -and $clientId -ne "00000000-0000-0000-0000-000000000000")
{
    Write-Host "Delete Entra Application Registration with clientid: [$($clientId)]..."
    az ad app delete --id $clientId
}
else {
    Write-Warning "Delete Entra Application Registration failed. Could not get clientid..."
}