NamedValue ARM tempalte deployment - secret value

Question

NamedValue ARM tempalte deployment - secret value

Nagashree Balasundaram 741

I see an issue with deploying a Named-Value ARM template to APIM when the type is set to "secret"
The ARM template deployment gives an error "Either Value or Keyvault must be provided"
What is the option to deploy templates which have values defined as secret?

Do these have to be manually created and mapped? or is there something i am missing while running the ARM template deployment? (Attaching the ARM tempalte and the parameters file)

248243-base-namedvaluestemplate.txt 248188-namedvaluesparameters.txt

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

JananiRamesh-MSFT 29,536 Moderator

Hi @Nagashree Balasundaram Thanks for reaching out. As per the error message you must include a value if there is no key vault secret. please refer the below screen shot

"resources": [
{
"apiVersion": "2021-12-01-preview",
"type": "Microsoft.ApiManagement/service/namedValues",
"name": "[concat(parameters('apimServiceName'), '/CEMApi-IntegratorKey')]",
"properties": {
"tags": [],
"secret": true,
"displayName": "CEMApi-IntegratorKey",
"VALUE": "------" <------------
}
}
]

let me know incase of further queries, I would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Nagashree Balasundaram 741 Reputation points

2022-10-12T22:39:48.913+00:00

Thanks @JananiRamesh-MSFT . I was referring to this option in APIM :

It looks like the value has to be provided in plain text in the ARM template. So what is the significance of this option "Secret"?
JananiRamesh-MSFT 29,536 Reputation points Moderator

2022-10-17T20:22:50.84+00:00

Hi @Nagashree Balasundaram Thanks for getting back, by providing the type as secret the value gets encrypted in APIM Database, Its just an added layer of security.
let me know incase of further queries, I would be happy to assist you.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.