I have a Bicep template where I create an App Service in which I need to link a SSL certificate that exists in Key Vault (both in same resource group). The Key Vault has Azure RBAC enabled. I use the…
Bicep can be used to create a role assignment as follows: resource RoleAssignment 'Microsoft.Authorization/roleAssignments@2020-10-01-preview' = { name: guid(managementGroup().id, RoleDefinitionId, principalId) properties: { roleDefinitionId: roleDefinition.id principalId: principalId principalType: principalType } } Where the principal type is 'ServicePrincipal', it seems the application…
First we used Terraform to create our resources along with proper tagging. But later we identified that the Admin team performed some manual modifications to the resource as part of some issues quick fixes and all. At the end the…
When I am trying to create Search Service using ARM Template, it showing the below error The relative path 'artifacts/linkedTemplate.json' could not be resolved. Please ensure the parent deployment references either an external URI or a template spec ID. The…
I'm in the process of migrating our functionapps to custom runtime containers. I'm doing this through ARM templates. I've got to the point where I can do this, however, in order to get it to work, I have to manually…
I'm working on a method/program that will automatically name resources according to restrictions and recommended abbrevation. At the moment I add the restrictions in a table but it's alot of labor and annoying to maintain. Are there an API I'm…
Trying to assign permissions for the app service deployment slot to keyvault and having a hell of a time getting it { "tenantId": "[subscription().tenantId]", "objectId": "[resourceId('Microsoft.Web/sites/slots', parameters('azureAppService').webSiteName, 'DEV').identity.principalId]", "permissions": { "secrets": [ "Get" ] } } Not sure what I'm…
I try to make a template for web app for docker. And I have the following json file: { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "sites_docker_webscraper_name": { "defaultValue": "docker-webscraper", "type": "String" }, "serverfarms_internet_suite_externalid": { "defaultValue": "/subscriptions/fea4c865-1e54-44b3-ba1d-07315468f083/resourceGroups/rg-idn-nvwa-sas_nvwa/providers/Microsoft.Web/serverfarms/crinternetsuite", "type": "String" } },…
is it possible to retrieve a Storage Account's Access Key when deploying the Storage Account via a Bicep module? My parent bicep creates a storage account using a module file, and it then needs an Access Key but I cannot…
I want create an Azure App Service with a custom hostname binding and a managed SSL certificate. When I create a single Bicep-template, the certificate resource can only be deployed if the hostname binding is already created. But to create…