2026.9.9.2

Overview
Name keyvault
Tag 2026.9.9.2
FullName br:bicepacrdevwcom.azurecr.io/bicep/modules/keyvault:2026.9.9.2
Last updated 2026-09-09 12:49:02:+00:00
Created 2026-09-09 12:49:02:+00:00
Digest sha256:119f53b1c8d914f5aac1366c57e7f03e157c5867f510bb00d330307840a3b212

Parameters

Name Type Required Description
env string Yes
system string Yes System/project name
tags object Yes Tags to add to the resources
secretReaderIds array No
[
]
 Key Vault Secret Readers
location string No
resourceGroup().location
 Azure region of the deployment
keyVaultName string No
format('{0}-kv-{1}', system, env)
secretWriterIds array No
[
]
 Key Vault Secret Writers
certificatesWriterIds array No
[
]
 Key Vault Certificate Writers
certificatesReadersIds array No
[
]
 Key Vault Certificate Readers
keyReadersIds array No
[
]
 Key Vault key Readers
keyWritersIds array No
[
]
 Key Vault key Writers
enablePurgeProtection bool No
true
 Enable purge protection for the key vault
networkAcls bool No
false
 Enable network ACLs for the key vault
bypass string No
'None'
 Bypass for the network ACLs
defaultAction string No
'Deny'
 Default action for the network ACLs
ipRules array No
[
]
 IP rules for the network ACLs. Example: [ { "value": "1.2.3.4/32" } ]
virtualNetworkRules array No
[
]
 Virtual network rules for the network ACLs. Example: [ { "id": "VnetId" } ]

Outputs

Name Type Description
keyVaultName string
vaultUri string

Example

@description('The target environment.')
param env string

@description('The deployment version.')
param version string = '1.0.0.0'

@description('System/project name')
param system string

@description('Tags to add to the resources')
param tags object


module keyvault 'br:bicepacrdevwcom.azurecr.io/bicep/modules/keyvault:2026.9.9.2' = {
    name: 'keyvault${env}${version}'
    params: {
      env: env
      system: system
      tags: tags
    }
}