Questions tagged [azure-blueprints]

This tag should be used when a question is about the authoring, publishing or applying of Azure Blueprints in your account.

20 questions
2
votes
2 answers

How can I pass pipeline variable to parameters file for blueprint assignment

I'm trying to create an Azure DevOps pipeline for deploying Azure Blueprint. There are some fields in the parameters file(JSON) which I want to be configurable. How can I pass these values as pipeline variables and use them in the parameters file? I…
HyperioN
  • 3,433
  • 2
  • 22
  • 36
2
votes
1 answer

Restricting Tag Editing, while being Owner of Resource Group

He everyone, I have a subscription where I want to create "sandbox" environments for people. My goal is to give folks a resource group, and make them owner of the Resource Group. They can do anything they want in this little resource group, but…
Chief
  • 130
  • 10
1
vote
2 answers

How to assign Access Policies to an Azure Key Vault using Blueprints

I am creating a key vault through an Azure Blueprint: it gets created with no problem. The thing is that, in order to access the Key Vault (Listing it, putting or getting values) Access Policies must be configured. With ARM templates, I could insert…
Ing. Luca Stucchi
  • 3,070
  • 6
  • 36
  • 58
1
vote
0 answers

Azure Blueprint Assignment is stuck in "Deploying" state - frozen in an infinite loop

After creating a new blueprint assignment for an existing blueprint, my blueprint assignment is stuck in the "Deploying" state for over an hour (should have taken 4-8 minutes). At this point I want to cancel the deployment, but I don't know how to…
Michael La Voie
  • 27,772
  • 14
  • 72
  • 92
1
vote
1 answer

Is it possible to access data from another artifact in Azure Blueprints ONLY using Azure Portal

I've been trying to access data from one artifact (ARM-template) in another artifact (ARM-template) that is on the same level. Apparently, passing data between artifacts is possible using output and reference function, as shown in this guide.…
DrejarN
  • 13
  • 3
0
votes
0 answers

Deploy Azure Blueprint to management group using terraform "azurerm management group template deployment" command

I want to assign an azure blueprint to management group scope. Since "azurerm_blueprint_assignment" command doesn't support mg level blueprint assignment. Reference :…
Hilal
  • 41
  • 7
0
votes
1 answer

List of all soft deleted resources in Azure?

I started to work with Azure Blueprints, and to make the usage "repeatable" it is desirable to "clean" automatically all resources they have created in a resource group and re-assign the blueprint. As I have experienced, some resource types get…
user2976698
  • 93
  • 2
  • 5
0
votes
1 answer

Does deleting an azure blueprint assignment also delete the resources?

I'm not too familiar with azure blueprints but I have a task to update an existing blueprint definition. This involves adding a couple of artifacts and a new resource group. I have a couple of questions about this process: If the blueprint…
user13696433
  • 93
  • 3
  • 11
0
votes
1 answer

Azure Blueprint deny read access to some admins

I need to allow only a couple of administrators access to a ressource group, I tried blueprints using the UI but I am only able to lock delete. Is it possible to block reading a ressource or ressource group? do I need to use REST API for that?
Anass Kartit
  • 2,017
  • 15
  • 22
0
votes
1 answer

How to deploy Azure Sentinel ARM template using Azure Blueprints?

I have gone through the Azure Sentinel documentation. How to deploy the Azure Sentinel ARM template with help of Azure Blueprints?
Pradeep
  • 5,101
  • 14
  • 68
  • 140
0
votes
1 answer

Azure deny assignment to prevent read access on Azure Blob Storage

Is there a way to create a deny assignment on management group level with an azure blueprint that prevent owner and contributor roles from reading blob storage content. In my specific case I want to store the terraform state and only want to grant…
dschniepp
  • 1,083
  • 12
  • 19
0
votes
1 answer

Azure Blueprints deployment permissions when linking template specs in another subscription

I am setting up Blueprints using linked template specs that are deployed in a common subscription. The Blueprints are published to a management group so I can deploy the same set of resources to multiple subscriptions. Blueprints with out using the…
0
votes
1 answer

Authentication via managed identity for blueprint assignment

I have to assign a blueprint via Rest API (link) How can I get token with managed identity? Managed Identity is like below: { "id": "/subscriptions/xxx-xxx-xxx/resourcegroups/xxxx/providers/Microsoft.ManagedIdentity/userAssignedIdentities/xxx", …
0
votes
1 answer

ARM Template for creating VM in azure using existing VHD Uri (osDiskVHDUri) & join to domain

Use-case description: I've a use case wherein, we need to create a VM in azure using the existing VHD Uri available in storage account & the same ARM template should have the feasibility to join to domain. At the present currently tried working &…
0
votes
0 answers

Assign Azure Blueprints on a Subscription Level using REST APIs

I need to use REST APIs to create, publish and assign Azure Blueprints on a Subscription level. I went through the documentation…
1
2