xximjasonxx

{
  "properties": {
    "displayName": "Allowed locations",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "This policy enables you to restrict the locations your organization can specify when deploying resources. Use to enforce your geo-compliance requirements. Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and resources that use the 'global' region.",
    "metadata": {
      "version": "1.0.0",
      "category": "General"
    },

xximjasonxx

{
  "alg": "RS256",
  "kid": "X5eXk4xyojNFum1kl2Ytv8dlNP4-c57dO6QGTVBwaNk",
  "typ": "JWT"
}.{
  "ver": "1.0",
  "iss": "b2clogin_url/v2.0/",
  "sub": "d0d196a4-96b3-4c46-b550-842ab59cd4d8",
  "aud": "3a61cc01-104a-44c8-a3ff-d895a860d70e",
  "exp": 1695000577,

xximjasonxx

public class HttpReturnUserRolesFunction
{
    [FunctionName("HttpReturnUserRoles")]
    public IActionResult HttpReturnUserRoles(
        [HttpTrigger(AuthorizationLevel.Anonymous, "get", "post", Route = null)] HttpRequest req,
        ILogger log)
    {
        return new OkObjectResult(new {
            version = "1.0.0",
            action = "Continue",

xximjasonxx

[assembly: FunctionsStartup(typeof(ConfigTest.Startup))]
namespace ConfigTest
{
    public class Startup : IWebJobsStartup
    {
        public IConfiguration Configuration { get; set; }

        public void Configure(IWebJobsBuilder builder)
        {
            var configurationBuilder = new ConfigurationBuilder();

xximjasonxx

[assembly: FunctionsStartup(typeof(FunctionApp.Startup))]
namespace FunctionApp
{
    class Startup : FunctionsStartup
    {
        public override void ConfigureAppConfiguration(IFunctionsConfigurationBuilder builder)
        {
            string cs = Environment.GetEnvironmentVariable("ConnectionString");
            builder.ConfigurationBuilder.AddAzureAppConfiguration(cs);
        }

xximjasonxx

public class ServiceBusQueueTrigger
{
  [FunctionName("ServiceBusQueueTrigger")]
  public void Run(
    [ServiceBusTrigger(queueName: "%QueueName%", Connection = "ServiceBusConnection")]string myQueueItem,
    ILogger log)
  {
    log.LogInformation($"C# ServiceBus queue trigger function processed message: {myQueueItem}");
  }
}

xximjasonxx

2023-08-28T15:40:19.076841064Z       ORDER BY [t].[AccountId], [a0].[AccountTypeId], [t0].[AddressId], [u].[UtilityId], [t1].[BGAccountMapId], [t1].[BillingGroupId0], [t2].[CAPMapId], [t2].[CustomerId0], [t3].[CAPMapId], [t3].[ProductId0], [t4].[CustomerId], [t4].[CAPMapId], [t4].[CustomerId0], [t6].[AccountId], [t6].[c], [t6].[BGAccountMapId], [t6].[BillingGroupId], [t8].[CAPMapId]
2023-08-28T15:40:33.910698728Z info: Microsoft.IdentityModel.LoggingExtensions.IdentityLoggerAdapter[0]
2023-08-28T15:40:33.910751636Z       IDX10242: Security token: '[PII of type 'System.String' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]' has a valid signature.
2023-08-28T15:40:33.910759030Z info: Microsoft.IdentityModel.LoggingExtensions.IdentityLoggerAdapter[0]
2023-08-28T15:40:33.910764059Z       IDX10239: Lifetime of the token is valid.
2023-08-28T15:40:33.910768487Z info: Microsoft.IdentityModel.LoggingExtensions.IdentityLoggerAdapter[0]
2023-08-28T15:40:33.910772886Z       IDX10234: Audience Valida

xximjasonxx

public Task AssignRoleToServicePrincipal(Guid objectId, string roleDefId, string scopePath)
{
    var tcs = new TaskCompletionSource();
    Task.Run(() =>
    {
        try
        {
            var scopePathResource = new ResourceIdentifier(scopePath);
            var roleDefId = $"/subscriptions/{scopePathResource.SubscriptionId}/providers/Microsoft.Authorization/roleDefinitions/{roleName}";
            var operationContent = new RoleAssignmentCreateOrUpdateContent(new ResourceIdentifier(roleDefId), objectId)

xximjasonxx

public Task AssignRoleToServicePrincipal(Guid objectId, string roleName, string scopePath)
{
    var tcs = new TaskCompletionSource();
    Task.Run(() =>
    {
        try
        {   
            var roleAssignmentResourceId = RoleAssignmentResource.CreateResourceIdentifier(scopePath, roleName);
            var roleAssignmentResource = _armClient.GetRoleAssignmentResource(roleAssignmentResourceId);
            var operationContent = new RoleAssignmentCreateOrUpdateContent(roleAssignmentResource.Id, objectId)

xximjasonxx

kind: Pod
apiVersion: v1
metadata:
  name: busybox-secrets-store-inline
  namespace: blog-post
spec:
  serviceAccountName: kv-access-account
  containers:
  - name: busybox
    image: registry.k8s.io/e2e-test-images/busybox:1.29-4