In Bicep, I can use subscriptionResourceId() or managementGroupResourceId() to refer to a resource at the subscription or management group level, respectively. In the following code, I'm using subscriptionResourceId() to create a (RBAC) role assignment at the subscription level for a…
curious, is it possible to deploy to azure app service or azure function app using bicep. That is, when creating app service in the bicep, we add the deployment of the app or function in the same template. I have…
I'm encountering a System.FormatException when trying to build my all Azure Bicep file into an ARM template JSON. The command I am using is: simple.bicep resource storageAccount 'Microsoft.Storage/storageAccounts@2021-04-01' = { name: 'mystorageaccount' location: 'West US' kind: 'StorageV2' sku: { name:…
How does Bicep (ARM) keep track of the state? I'm used to Terraform, which will keep track of state, and add/remove resources depending on the configuration. But with Bicep (ARM), I'm confused. I'm currently deploying my Bicep file to a…
I'm trying to deploy a dashboard that displays a couple of metrics for a Service Bus Queue in the Azure Portal using Bicep. Creating the tiles itself works fine, but I'm struggling with displaying the metrics for a filtered resource.…
I want to grant AppService access to a Bing resource (Microsoft.Bing/accounts@2020-06-10). Which role (Microsoft.Authorization/roleDefinitions) should I set in Bing's IAM (Microsoft.Authorization/roleAssignments)? In detail, I need to know the following xxx. var role = subscriptionResourceId( 'Microsoft.Authorization/roleDefinitions', 'xxx-xxx-xxx-xxx-xxx' ) resource searchServiceIndexAppPermissions 'Microsoft.Authorization/roleAssignments@2020-04-01-preview'…
I am deploying very simple Azure log search alert rules using Bicep. Code sample: param alertLocation string = resourceGroup().location var umAlertRules = [ { name: 'Update Manager Schedule Failures' query: 'here is query, not important for explanation to have here'…
In Bicep, I am attempting to create a User Assigned Identity, and then assigning that identity a few scopes using the new Microsoft.Graph bicep capabilities: resource sqlIdentity 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' = { location: location name: 'id-sqlserver-${environment}' } //https://learn.microsoft.com/en-us/graph/templates/reference/oauth2permissiongrants?view=graph-bicep-1.0 resource graphPermissions 'Microsoft.Graph/[email protected]' =…
I'm getting an error "Cannot find VirtualNetwork with name vnet-name". The vnet is in a different resource group than the web app. var subnetName = 'subnetName' var linuxVersion = 'node|20-lts' resource appService 'Microsoft.Web/sites@2023-12-01' = { name: '${webAppPrefix}${name}' location: location properties:…
This is the bicep format for table access policy resource symbolicname 'Microsoft.Storage/storageAccounts/tableServices/tables@2023-01-01' = { name: 'string' parent: resourceSymbolicName properties: { signedIdentifiers: [ { accessPolicy: { expiryTime: 'string' permission: 'string' startTime: 'string' } id: 'string' } ] } } permission List…