Azure Bicep Tips and Tricks Blog

Description.bicep

@description('Required. Name of the Azure Key Vault resource.')
param parKeyVaultName string

@description('''
  **Optional**. An access policy array that contains identities with specified permissions.
  This parameter expects the following format:
  ```[
    {
      tenantId: 'tenantId'
      objectId: 'objectId'
      permissions: {
        keys: [
          'get'
        ]
        secrets: [
          'list'
          'get'
        ]
      }
    }
  ]
  ```
''')
param parAccessPolicies array = [
  {
    tenantId: tenant().tenantId
    objectId: '18849fec-d7c8-4673-b00c-551863cd1329'
    permissions: {
      keys: [
        'get'
      ]
      secrets: [
        'list'
        'get'
      ]
    }
  }
]

... truncated Key Vault resource creation ...