This automation is used when an automation designer intends to implement, install, and provision one or more virtual machine assemblies.
 
This design extends the automation described in the previous article https://dzone.com/articles/arm-azure-resource-manager-templates-nested-loops to include the installation of 1 to n virtual machine assemblies, and to provision winRM, initialize data disks, and configure an application log on each virtual machine. A virtual machine is assembled from a collection of resource objects: compute e.g. vm; storage e.g. data managed disks, and; network e.g. network interface card and public ip address.
to edit.

This design’s resource specification templates and scrips, intended for elucidation not for production, are available here, under an MIT license:
https://github.com/TecProTools/azure-arm-vmas-NestedLoops
​

​Footnotes
[1] A Point-to-Site (P2S) VPN gateway connection allows you to create a secure connection to your virtual network from an individual client computer. P2S is a VPN connection over SSTP (Secure Socket Tunnelling Protocol). P2S connections do not require a VPN device or a public-facing IP address to work. You establish the VPN connection by starting it from the client computer.
From <https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways>
[2] Automation engineer rbac role has the role based access control permissions granted for the automation engineer role, i.e. Contributor, authenticated by azure active directory.