ArcBox - Security enhancements

[janegilring]

This pull request includes multiple changes to the azure_jumpstart_arcbox project, focusing on simplifying parameter handling, enhancing security, and improving role assignments. The most important changes are summarized below:

Parameter Handling Simplification:

• Removed several parameters (adminPassword, spnClientSecret, azdataPassword, registryPassword) from Bootstrap.ps1 and clientVm.bicep, simplifying the scripts by reducing the number of required inputs. [1] [2]
• Updated the commandToExecute in clientVm.bicep to reflect the removal of these parameters.

Security Enhancements:

• Changed the retrieval of AZDATA_PASSWORD from Azure Key Vault to use windowsAdminPassword instead in DataOpsLogonScript.ps1.
• Added secure default values for windowsAdminPassword and registryPassword using newGuid() in main.bicep. [1] [2]
• Stored windowsAdminPassword and registryPassword in Azure Key Vault as secrets in mgmtArtifacts.bicep.

Role Assignments:

• Added a new role assignment for the deploy user as an Azure Key Vault Administrator in clientVm.bicep.

VM Management:

• Forced VM restarts in ArcServersLogonScript.ps1 to ensure the changes take effect immediately.

These changes collectively enhance the security and manageability of the Azure Jumpstart ArcBox deployment scripts.