Learn how to enhance objects with User-Defined Types in Azure Bicep blog

keyVaultAccessPolicyType.bicep

type accessPoliciesType = {
  tenantId: string
  objectId:  string
  permissions: {
    keys: keyPermissionType?
    secrets: secretPermissionType?
  }
}[]

type keyPermissionType = ('get' | 'list' | 'create' | 'update' | 'delete')[]
type secretPermissionType = ('get' | 'list' | 'set' | 'delete')[]

param parAccessPolicies accessPoliciesType

resource keyVault 'Microsoft.KeyVault/vaults@2019-09-01' = {
  name: 'my-key-vault'
  location: 'westeurope'
  properties: {
    enabledForDeployment: true
    enabledForTemplateDeployment: true
    enabledForDiskEncryption: true
    tenantId: tenant().tenantId
    accessPolicies: parAccessPolicies
    sku: {
      name: 'standard'
      family: 'A'
    }
  }
}