Skip to content

Instantly share code, notes, and snippets.

@RichieBzzzt

RichieBzzzt/keyvault_arm_with_access_policy.json

Created July 24, 2019 08:17
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save RichieBzzzt/3d6bb2c1dc0885d0de141d2edf8d1452 to your computer and use it in GitHub Desktop.
Save RichieBzzzt/3d6bb2c1dc0885d0de141d2edf8d1452 to your computer and use it in GitHub Desktop.
Download ZIP
part of arm template for deploying keyvault
Raw
keyvault_arm_with_access_policy.json
{
"type": "Microsoft.KeyVault/vaults",
"name": "[parameters('keyVaultName')]",
"apiVersion": "2018-02-14",
"location": "[resourceGroup().location]",
"tags": {},
"scale": null,
"properties": {
"sku": {
"family": "A",
"name": "Standard"
},
"tenantId": "[parameters(tenantId)]",
"accessPolicies": [
{
"tenantId": "[parameters(tenantId)]",
"objectId": "[parameters('serviceprincipalobjectid')]",
"permissions": {
"keys": [
"Get",
"List",
"Update",
"Create",
"Import",
"Delete",
"Recover",
"Backup",
"Restore"
],
"secrets": [
"Get",
"List",
"Set",
"Delete",
"Recover",
"Backup",
"Restore"
],
"certificates": [
"Get",
"List",
"Update",
"Create",
"Import",
"Delete",
"Recover",
"Backup",
"Restore",
"ManageContacts",
"ManageIssuers",
"GetIssuers",
"ListIssuers",
"SetIssuers",
"DeleteIssuers"
]
}
}
],
"enabledForDeployment": false,
"enabledForDiskEncryption": false,
"enabledForTemplateDeployment": false
},
"dependsOn": []
},
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment