Azure-docs: ARM template missing detail

[rwatjen]

The ARM template example lists

"APPINSIGHTS_INSTRUMENTATIONKEY": "[concat('@Microsoft.KeyVault(SecretUri=', reference(variables('appInsightsKeyResourceId')).secretUriWithVersion, ')')]",

as a way to get the SecretUri with the required version. But it's not clear what appInsightsKeyResourceId is.
Can you elaborate on what that variable's value is?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 7feaa3d0-7233-a3cb-cb9b-a9a55b1f0d7a
• Version Independent ID: f41f9d51-52f8-1f45-1043-1344a3b74458
• Content: Key Vault references - Azure App Service
• Content Source: articles/app-service/app-service-key-vault-references.md
• Service: app-service
• GitHub Login: @mattchenderson
• Microsoft Alias: mahender

[BryanTrach-MSFT]

@rwatjen Thanks for the feedback! We are currently investigating and will update you shortly.

[RyanHill-MSFT]

@rwatjen appInsightsKeyResourceId is a variable that you can use to add application insights to your deployment template. See https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-authoring-templates#variables for more information. In this case, you would set it to the instrumentation key of an existing application insights resource.

Hope this helps but if not, please feel free to reach back out to us.

[rwatjen]

I know it is a variable, that wasn't what I meant. The variable appInsightsKeyResourceId is referenced, but it is not declared in the example, so it wasn't clear to me how to get to the secretUriWithVersion property.

I have figured out the solution to my problem, though.

You can get the resource ID with the resourceId ARM function:

resourceId('Microsoft.KeyVault/vaults/secrets', variables('keyVaultName'), variables('secretName'))

For keyvault secrets, it requires the keyvault and secret names.
Then, to reference that ARM resource, use the reference function with the resource ID as parameter. The result of the reference function is the keyvault secret, which has the secretUriWithVersion property.

Combined into an app setting, like in the example it goes like this:

"SecretSettingsValue": "[concat('@Microsoft.KeyVault(SecretUri=', reference(resourceId('Microsoft.KeyVault/vaults/secrets', variables('keyVaultName'), variables('secretName'))).secretUriWithVersion, ')')]"

[borys86]

why the last comment from @rwatjen was not added to the documentation?

[Ratomir]

Thanks to @rwatjen. His comment has to be part of the official documentation.

[kutsyk-neocles]

Why the issue is closed without fixing documentation?
https://docs.microsoft.com/en-us/azure/app-service/app-service-key-vault-references
Documentation still doesn't contain the explanation about Id variable.
Is it a new style to get the results report, closing issues without fixing real problems?