2026.8.25.4

Overview
Name keyvault
Tag 2026.8.25.4
FullName br:bicepacrdevwcom.azurecr.io/bicep/modules/keyvault:2026.8.25.4
Last updated 2026-08-25 10:41:00:+00:00
Created 2026-08-25 10:41:00:+00:00
Digest sha256:c558ba1b78d83044ae1798eb832ce767a028f79b7b9edfca6bed0862ea3dc9ec

Parameters

Name Type Required Description
env string Yes
system string Yes System/project name
tags object Yes Tags to add to the resources
secretReaderIds array No
[
]
 Key Vault Secret Readers
location string No
resourceGroup().location
 Azure region of the deployment
keyVaultName string No
format('{0}-kv-{1}', system, env)
secretWriterIds array No
[
]
 Key Vault Secret Writers
certificatesWriterIds array No
[
]
 Key Vault Certificate Writers
certificatesReadersIds array No
[
]
 Key Vault Certificate Readers
keyReadersIds array No
[
]
 Key Vault key Readers
keyWritersIds array No
[
]
 Key Vault key Writers
enablePurgeProtection bool No
true
 Enable purge protection for the key vault
networkAcls bool No
false
 Enable network ACLs for the key vault
bypass string No
'None'
 Bypass for the network ACLs
defaultAction string No
'Deny'
 Default action for the network ACLs
ipRules array No
[
]
 IP rules for the network ACLs. Example: [ { "value": "1.2.3.4/32" } ]
virtualNetworkRules array No
[
]
 Virtual network rules for the network ACLs. Example: [ { "id": "VnetId" } ]

Outputs

Name Type Description
keyVaultName string
vaultUri string

Example

@description('The target environment.')
param env string

@description('The deployment version.')
param version string = '1.0.0.0'

@description('System/project name')
param system string

@description('Tags to add to the resources')
param tags object


module keyvault 'br:bicepacrdevwcom.azurecr.io/bicep/modules/keyvault:2026.8.25.4' = {
    name: 'keyvault${env}${version}'
    params: {
      env: env
      system: system
      tags: tags
    }
}