function Invoke-HybridIaC {
    [CmdletBinding(SupportsShouldProcess=$true)]
    param(
        [Parameter(Mandatory=$true)]
        [ValidateSet('Azure','AWS','OnPrem')]
        [string[]]$Environments,
        
        [string]$DscConfigPath = '$PSScriptRoot/dsc'
    )

    $deploymentReport = [PSCustomObject]@{
        Timestamp = Get-Date -Format 'yyyy-MM-dd HH:mm:ss'
        AppliedConfigs = @()
        ComplianceStatus = @{}
        CrossPlatformIssues = @()
    }

    try {
        # 应用Terraform基础设施
        $Environments | ForEach-Object {
            if ($PSCmdlet.ShouldProcess("Deploy $_ resources")) {
                terraform -chdir="$DscConfigPath/terraform/$_" apply -auto-approve
            }
        }

        # 执行DSC配置
        $Environments | ForEach-Object {
            $dscConfig = Get-ChildItem "$DscConfigPath/$_" -Filter *.ps1
            $dscConfig | ForEach-Object {
                $job = Start-Job -ScriptBlock {
                    param($config)
                    & $config.FullName
                } -ArgumentList $_
                $deploymentReport.AppliedConfigs += $job | Wait-Job | Receive-Job
            }
        }

        # 验证混合云合规性
        $deploymentReport.ComplianceStatus = $Environments | ForEach-Object {
            $status = Test-DscConfiguration -CimSession (New-CimSession -ComputerName $_)
            @{$_ = $status.InDesiredState ? 'Compliant' : 'Non-Compliant'}
        }
    }
    catch {
        Write-Error "混合云部署失败: $_"
        terraform -chdir="$DscConfigPath/terraform" destroy -auto-approve
    }

    # 生成统一部署报告
    $deploymentReport | Export-Clixml -Path "$env:TEMP/HybridIaC_Report_$(Get-Date -Format yyyyMMdd).xml"
    return $deploymentReport
}

function Manage-AzureFunction {
    param(
        [ValidateSet('Create','Update','Remove')]
        [string]$Action,
        [string]$FunctionName,
        [string]$ResourceGroup
    )

    try {
        # 身份验证检查
        if (-not (Get-AzContext)) {
            Connect-AzAccount -UseDeviceAuthentication
        }

        switch ($Action) {
            'Create' {
                New-AzFunctionApp -Name $FunctionName -ResourceGroupName $ResourceGroup `
                    -Runtime PowerShell -StorageAccount (Get-AzStorageAccount -ResourceGroupName $ResourceGroup).StorageAccountName `
                    -FunctionsVersion 4 -Location 'EastUS'
            }
            'Update' {
                Publish-AzWebApp -ResourceGroupName $ResourceGroup -Name $FunctionName `
                    -ArchivePath (Compress-Archive -Path ./src -DestinationPath function.zip -Force)
            }
            'Remove' {
                Remove-AzFunctionApp -Name $FunctionName -ResourceGroupName $ResourceGroup -Force
            }
        }

        # 获取运行状态
        $status = Get-AzFunctionApp -Name $FunctionName -ResourceGroupName $ResourceGroup
        Write-Host "操作成功：$($status.State)"
    }
    catch {
        Write-Error "操作失败：$_"
    }
}