CODEWITHSUNDEEP
azureazure-devopsazure-resource-managerazure-keyvaultazure-rm-template
Tsuchinoko
Tsuchinoko

Reputation: 27

Adding a Key Vault Access Policy to an Existing Key Vault via ARM

I am trying to do an ARM deployment in Azure Devops whereby I add a key vault access policy to an existing key vault in Azure.

I want to use the following ARM template which adds an access policy to an existing Key Vault: https://github.com/Azure/azure-quickstart-templates/tree/master/101-keyvault-add-access-policy

I have a separate template that deploys an App service and creates a system assigned managed identity.

What is the best way to link the two templates? how do i reference the System Assigned identity of the app service in the 'Add Key Vault Policy' ARM template if I dont know what the object ID of the service Principle is yet?

Upvotes: 0

Views: 873

Answers (2)

K.J.M.O.
K.J.M.O.

Reputation: 227

If you want to get the principleId from a logic app consumption you can do like this:

[reference(concat(resourceId(parameters('ResourceGroup'),'Microsoft.Logic/workflows', parameters('logicAppName')), '/providers/Microsoft.ManagedIdentity/Identities/default'), '2018-11-30').principalId]

Upvotes: 0

4c74356b41
4c74356b41

Reputation: 72191

here's a sample how you would retrieve the managed identity Id in your other template:

"[reference(concat(resourceId('Microsoft.Web/sites/', %wep_app_name%), '/providers/Microsoft.ManagedIdentity/Identities/default'), '2015-08-31-PREVIEW').principalId]"

https://github.com/Azure/azure-quickstart-templates/blob/master/101-functions-managed-identity/azuredeploy.json#L295

Upvotes: 3

Related Questions