2026.8.25.2

Overview
Name keyvault
Tag 2026.8.25.2
FullName br:bicepacrdevwcom.azurecr.io/bicep/modules/keyvault:2026.8.25.2
Last updated 2026-08-25 09:46:45:+00:00
Created 2026-08-25 09:46:45:+00:00
Digest sha256:bcaf44fdd1f632f0c3b5b50c9972f036f7d8b9796ae54b0d73c4d7b354d3f5a0

Parameters

Name Type Required Description
env string Yes
system string Yes System/project name
tags object Yes Tags to add to the resources
secretReaderIds array No
[
]
 Key Vault Secret Readers
location string No
resourceGroup().location
 Azure region of the deployment
keyVaultName string No
format('{0}-kv-{1}', system, env)
secretWriterIds array No
[
]
 Key Vault Secret Writers
certificatesWriterIds array No
[
]
 Key Vault Certificate Writers
certificatesReadersIds array No
[
]
 Key Vault Certificate Readers
keyReadersIds array No
[
]
 Key Vault key Readers
keyWritersIds array No
[
]
 Key Vault key Writers
enablePurgeProtection bool No
true
 Enable purge protection for the key vault
networkAcls bool No
false
 Enable network ACLs for the key vault
bypass string No
'None'
 Bypass for the network ACLs
defaultAction string No
'Deny'
 Default action for the network ACLs
ipRules array No
[
]
 IP rules for the network ACLs. Example: [ { "value": "1.2.3.4/32" } ]
virtualNetworkRules array No
[
]
 Virtual network rules for the network ACLs. Example: [ { "id": "VnetId" } ]

Outputs

Name Type Description
keyVaultName string
vaultUri string

Example

@description('The target environment.')
param env string

@description('The deployment version.')
param version string = '1.0.0.0'

@description('System/project name')
param system string

@description('Tags to add to the resources')
param tags object


module keyvault 'br:bicepacrdevwcom.azurecr.io/bicep/modules/keyvault:2026.8.25.2' = {
    name: 'keyvault${env}${version}'
    params: {
      env: env
      system: system
      tags: tags
    }
}