Updated keyvault access policy (#3109)

* updated keyvault access policy for function app compatibility
microsoft · Jun 28, 2023 · f80386f · f80386f
1 parent 9483abc
commit f80386f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/deployment/azuredeploy.bicep b/src/deployment/azuredeploy.bicep
@@ -98,6 +98,7 @@ resource keyVault 'Microsoft.KeyVault/vaults@2021-10-01' = {
   location: location
   properties: {
     enabledForDiskEncryption: false
+    enabledForDeployment: true
     enabledForTemplateDeployment: true
     sku: {
       family: 'A'
@@ -125,14 +126,16 @@ resource keyVault 'Microsoft.KeyVault/vaults@2021-10-01' = {
         }
       }
       {
-        objectId: 'abfa0a7c-a6b6-4736-8310-5855508787cd'
+        objectId: 'b453993d-81d4-41a7-be3a-549bc2435ffa'
         tenantId: tenantId
         permissions: {
           secrets: [
             'get'
+            'list'
           ]
           certificates: [
             'get'
+            'list'
           ]
         }
       }