Azure / Azure/Azure-Landing-Zones
Access to bootstrap uami object id
- Dominant language
- PowerShell
- Stars
- 96
- Forks
- 70
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 7
Description
### Is there an existing issue for this?
- [x] I have searched the existing issues
### Infrastructure as Code Type? (Required)
both
### Starter Module? (Required)
not relevant
### Use Case (Required)
For certain use cases I may need to know the object id of the apply UAMI. For example for data plane operations on a Key Vault, I need to grant myself access first. Since we use a read-only identity to plan with, we cannot easily get the object id of the apply identity.
### Proposed Solution (Required)
For this edge case we can supply the object ids into the variables or pipeline secrets.
### Important Factoids (Optional)
This is not currently required for the platform landing zone, but has been raised by a team attempting to add an NVA deployment to the same module.
### References (Optional)
_No response_
Contributor guide
Research direction
Start by locating the landing zone module's bootstrap UAMI inputs and the pipeline configuration for the apply identity. The issue proposes supplying the object ID through variables or pipeline secrets; done means the apply UAMI object ID can be provided for downstream access requirements.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- authorization, cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100