Intune Deployment Kit

Check what you want, generate one bundle JSON, deploy it to any tenant.

Bundle downloaded

Manual import: settings catalog JSONs import at Devices > Configuration > Create > Import policy. Everything else, build by hand from the JSON for now.

Import the bundle with deploy-bundle.ps1:

How to import

Tick the policies you want, then click Generate Bundle.
Save the download as C:\Source\bundle.json.
First run only: Install-Module Microsoft.Graph.Authentication -Scope CurrentUser
Paste this:

# Creates Intune policies from a bundle file
Connect-MgGraph -Scopes "DeviceManagementConfiguration.ReadWrite.All"
$b = Get-Content C:\Source\bundle.json -Raw | ConvertFrom-Json
foreach ($i in $b.items) {
    $p = $i.content | Select-Object name, description, platforms, technologies, settings
    Invoke-MgGraphRequest -Method POST -Uri "https://graph.microsoft.com/beta/deviceManagement/configurationPolicies" -Body ($p | ConvertTo-Json -Depth 100)
}

Policies are created unassigned. Assign them in Devices, Configuration. Running twice creates duplicates.