Microsoft.AppConfiguration configurationStores 2020-06-01

Bicep resource definition

The configurationStores resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.AppConfiguration/configurationStores resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.AppConfiguration/configurationStores@2020-06-01' = {
  name: 'string'
  location: 'string'
  tags: {
    tagName1: 'tagValue1'
    tagName2: 'tagValue2'
  }
  sku: {
    name: 'string'
  }
  identity: {
    type: 'string'
    userAssignedIdentities: {}
  }
  properties: {
    encryption: {
      keyVaultProperties: {
        identityClientId: 'string'
        keyIdentifier: 'string'
      }
    }
    publicNetworkAccess: 'string'
  }
}

Property values

configurationStores

Name Description Value
name The resource name string (required)

Character limit: 5-50

Valid characters:
Alphanumerics, underscores, and hyphens.
location The location of the resource. This cannot be changed after the resource is created. string (required)
tags The tags of the resource. Dictionary of tag names and values. See Tags in templates
sku The sku of the configuration store. Sku (required)
identity The managed identity information, if configured. ResourceIdentity
properties The properties of a configuration store. ConfigurationStoreProperties

ResourceIdentity

Name Description Value
type The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities. 'None'
'SystemAssigned'
'SystemAssigned, UserAssigned'
'UserAssigned'
userAssignedIdentities The list of user-assigned identities associated with the resource. The user-assigned identity dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. object

ConfigurationStoreProperties

Name Description Value
encryption The encryption settings of the configuration store. EncryptionProperties
publicNetworkAccess Control permission for data plane traffic coming from public networks while private endpoint is enabled. 'Disabled'
'Enabled'

EncryptionProperties

Name Description Value
keyVaultProperties Key vault properties. KeyVaultProperties

KeyVaultProperties

Name Description Value
identityClientId The client id of the identity which will be used to access key vault. string
keyIdentifier The URI of the key vault key used to encrypt data. string

Sku

Name Description Value
name The SKU name of the configuration store. string (required)

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
App Configuration with VM

Deploy to Azure
This template references existing key-value configurations from an existing config store and uses retrieved values to set properties of the resources the template creates.
Create an App Configuration Store

Deploy to Azure
This template creates an Azure App Configuration store.
Create an App Configuration Store with Feature Flag

Deploy to Azure
This template creates a new Azure App Configuration store with one feature flag.
Create an App Configuration Store with Feature Flag

Deploy to Azure
This template creates a new Azure App Configuration store with one Key Vault reference.
Create an App Configuration Store with Outputs

Deploy to Azure
This template creates a new Azure App Configuration store with two key-values.
App Configuration Key-Values

Deploy to Azure
This template creates a new Azure App Configuration store with three key-values controlled by a copy function.

ARM template resource definition

The configurationStores resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.AppConfiguration/configurationStores resource, add the following JSON to your template.

{
  "type": "Microsoft.AppConfiguration/configurationStores",
  "apiVersion": "2020-06-01",
  "name": "string",
  "location": "string",
  "tags": {
    "tagName1": "tagValue1",
    "tagName2": "tagValue2"
  },
  "sku": {
    "name": "string"
  },
  "identity": {
    "type": "string",
    "userAssignedIdentities": {}
  },
  "properties": {
    "encryption": {
      "keyVaultProperties": {
        "identityClientId": "string",
        "keyIdentifier": "string"
      }
    },
    "publicNetworkAccess": "string"
  }
}

Property values

configurationStores

Name Description Value
type The resource type 'Microsoft.AppConfiguration/configurationStores'
apiVersion The resource api version '2020-06-01'
name The resource name string (required)

Character limit: 5-50

Valid characters:
Alphanumerics, underscores, and hyphens.
location The location of the resource. This cannot be changed after the resource is created. string (required)
tags The tags of the resource. Dictionary of tag names and values. See Tags in templates
sku The sku of the configuration store. Sku (required)
identity The managed identity information, if configured. ResourceIdentity
properties The properties of a configuration store. ConfigurationStoreProperties

ResourceIdentity

Name Description Value
type The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities. 'None'
'SystemAssigned'
'SystemAssigned, UserAssigned'
'UserAssigned'
userAssignedIdentities The list of user-assigned identities associated with the resource. The user-assigned identity dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. object

ConfigurationStoreProperties

Name Description Value
encryption The encryption settings of the configuration store. EncryptionProperties
publicNetworkAccess Control permission for data plane traffic coming from public networks while private endpoint is enabled. 'Disabled'
'Enabled'

EncryptionProperties

Name Description Value
keyVaultProperties Key vault properties. KeyVaultProperties

KeyVaultProperties

Name Description Value
identityClientId The client id of the identity which will be used to access key vault. string
keyIdentifier The URI of the key vault key used to encrypt data. string

Sku

Name Description Value
name The SKU name of the configuration store. string (required)

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
App Configuration with VM

Deploy to Azure
This template references existing key-value configurations from an existing config store and uses retrieved values to set properties of the resources the template creates.
Create an App Configuration Store

Deploy to Azure
This template creates an Azure App Configuration store.
Create an App Configuration Store with Feature Flag

Deploy to Azure
This template creates a new Azure App Configuration store with one feature flag.
Create an App Configuration Store with Feature Flag

Deploy to Azure
This template creates a new Azure App Configuration store with one Key Vault reference.
Create an App Configuration Store with Outputs

Deploy to Azure
This template creates a new Azure App Configuration store with two key-values.
App Configuration Key-Values

Deploy to Azure
This template creates a new Azure App Configuration store with three key-values controlled by a copy function.

Terraform (AzAPI provider) resource definition

The configurationStores resource type can be deployed with operations that target:

  • Resource groups

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.AppConfiguration/configurationStores resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.AppConfiguration/configurationStores@2020-06-01"
  name = "string"
  location = "string"
  parent_id = "string"
  tags = {
    tagName1 = "tagValue1"
    tagName2 = "tagValue2"
  }
  identity {
    type = "string"
    identity_ids = []
  }
  body = jsonencode({
    properties = {
      encryption = {
        keyVaultProperties = {
          identityClientId = "string"
          keyIdentifier = "string"
        }
      }
      publicNetworkAccess = "string"
    }
    sku = {
      name = "string"
    }
  })
}

Property values

configurationStores

Name Description Value
type The resource type "Microsoft.AppConfiguration/configurationStores@2020-06-01"
name The resource name string (required)

Character limit: 5-50

Valid characters:
Alphanumerics, underscores, and hyphens.
location The location of the resource. This cannot be changed after the resource is created. string (required)
parent_id To deploy to a resource group, use the ID of that resource group. string (required)
tags The tags of the resource. Dictionary of tag names and values.
sku The sku of the configuration store. Sku (required)
identity The managed identity information, if configured. ResourceIdentity
properties The properties of a configuration store. ConfigurationStoreProperties

ResourceIdentity

Name Description Value
type The type of managed identity used. The type 'SystemAssigned, UserAssigned' includes both an implicitly created identity and a set of user-assigned identities. The type 'None' will remove any identities. "SystemAssigned"
"SystemAssigned, UserAssigned"
"UserAssigned"
identity_ids The list of user-assigned identities associated with the resource. The user-assigned identity dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. Array of user identity IDs.

ConfigurationStoreProperties

Name Description Value
encryption The encryption settings of the configuration store. EncryptionProperties
publicNetworkAccess Control permission for data plane traffic coming from public networks while private endpoint is enabled. "Disabled"
"Enabled"

EncryptionProperties

Name Description Value
keyVaultProperties Key vault properties. KeyVaultProperties

KeyVaultProperties

Name Description Value
identityClientId The client id of the identity which will be used to access key vault. string
keyIdentifier The URI of the key vault key used to encrypt data. string

Sku

Name Description Value
name The SKU name of the configuration store. string (required)