Skip to content

Commit

Permalink
Refactor Azure Bicep scripts
Browse files Browse the repository at this point in the history
  • Loading branch information
tomaszprasolek committed Mar 3, 2024
1 parent 67e473e commit 577fb12
Showing 1 changed file with 50 additions and 0 deletions.
50 changes: 50 additions & 0 deletions AZ204-DocumentVault/Bicep/keyVault-secrets.bicep
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
// Parameters
param parKeyVaultName string
param parStorageAccountName string
param parCosmosDbName string

// Key vault
resource resKeyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing ={
name: parKeyVaultName
}

// Storage account
resource resStorageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' existing = {
name: parStorageAccountName
}

// Cosmos Db
resource resCosmosDb 'Microsoft.DocumentDB/databaseAccounts@2023-11-15' existing = {
name: parCosmosDbName
}

// ------------------------------------
// Create a secrets outside of key vault definition
// ------------------------------------

// Storage account key
resource resSecret 'Microsoft.KeyVault/vaults/secrets@2021-11-01-preview' = {
parent: resKeyVault
name: 'StorageAccountKey'
properties: {
value: resStorageAccount.listKeys().keys[0].value
}
}

// Comsos DB primary master key
resource resSecretCosmosDbKey 'Microsoft.KeyVault/vaults/secrets@2021-11-01-preview' = {
parent: resKeyVault
name: 'CosmosDbKey'
properties: {
value: resCosmosDb.listKeys().primaryMasterKey
}
}

// Function app URL code
resource resSecretFunctionAppUrlCode 'Microsoft.KeyVault/vaults/secrets@2021-11-01-preview' = {
parent: resKeyVault
name: 'test'
properties: {
value: resCosmosDb.listKeys().primaryMasterKey
}
}

0 comments on commit 577fb12

Please sign in to comment.