Getting no permission to add Azure roles to the account message. I am trying to add Azure role assignments to the storage account. I am creating a function app in bicep, and the next step after that is, I want…
I have a Bicep template where I create an App Service in which I need to link a SSL certificate that exists in Key Vault (both in same resource group). The Key Vault has Azure RBAC enabled. I use the…
Bicep can be used to create a role assignment as follows: resource RoleAssignment 'Microsoft.Authorization/roleAssignments@2020-10-01-preview' = { name: guid(managementGroup().id, RoleDefinitionId, principalId) properties: { roleDefinitionId: roleDefinition.id principalId: principalId principalType: principalType } } Where the principal type is 'ServicePrincipal', it seems the application…
I want to deploy an Ubuntu VM on Azure and automatically execute a few lines of Bash code right after the VM is deployed. The Bash code is supposed to install PowerShell on the VM. To do this, I use…
I have a fairly simple Bicep script for creating a Cosmos Database as well as a container within it: resource cosmos_db_live 'Microsoft.DocumentDB/databaseAccounts/sqlDatabases@2022-05-15' = { parent: cosmos_account name: 'live' properties: { resource: { id: 'live' } options: { throughput: 600 }…
For a project I want to deploy three related resources to Azure through Bicep templates: 1) App Service with System Assigned Managed Identity, 2) Key Vault and 3) Access policy for the App Service (step 1) to the Key Vault…
From my "main" bicep module, I would like to reference an existing function that is created by a module called from the same "main" bicep. So used the following code: resource functionApp 'Microsoft.Web/sites@2021-02-01' existing = { name: functionAppName scope: resourceGroup(subscriptionId,…
is it possible to retrieve a Storage Account's Access Key when deploying the Storage Account via a Bicep module? My parent bicep creates a storage account using a module file, and it then needs an Access Key but I cannot…
I'm a beginner at Microsoft Azure so please bear with me. I'm following this tutorial on deploying bicep templates with parameters, my bicep file is the exact same as the one in the tutorial. However, when I attempt to deploy…
I want create an Azure App Service with a custom hostname binding and a managed SSL certificate. When I create a single Bicep-template, the certificate resource can only be deployed if the hostname binding is already created. But to create…