BICEP现在支持Microsoft Graph(请参阅documentation),因此您可以获得对App Service资源提供商的参考并像这样抓住对象ID:
extension microsoftGraphV1
...
// Get a reference to app service resource provider
resource appServiceResourceProvider 'Microsoft.Graph/[email protected]' existing = {
appId: 'abfa0a7c-a6b6-4736-8310-5855508787cd'
}
resource keyVault 'Microsoft.KeyVault/vaults@2023-02-01' = {
name: keyVaultName
location: location
properties: {
...
accessPolicies:[
...
{
objectId: appServiceResourceProvider.id
permissions:{
certificates: ['get']
secrets:['get']
}
tenantId: tenantId
}
]
}
}