Skip to content

[AVM Module Issue]: Not able to set Customer-managed key for CosmosDBAccount #3748

@dmusic

Description

@dmusic

Check for previous/existing GitHub issues

  • I have checked for previous/existing GitHub issues

Issue Type?

Feature Request

Module Name

avm/res/document-db/database-account

(Optional) Module Version

0.8.1

Description

Description

In CosmosDB Account AVM, it is not possible to set customer-managed key for encryption.

Following properties are missing:

  • keyVaultKeyUri - The URI of the key vault
  • defaultIdentity - The default identity for accessing key vault used in features like customer managed keys. The default identity needs to be explicitly set by the users. It can be "FirstPartyIdentity", "SystemAssignedIdentity" and more.

See plain Bicep: https://learn.microsoft.com/en-us/azure/templates/Microsoft.DocumentDB/2023-04-15/databaseAccounts?pivots=deployment-language-bicep

This would enable direct encryption of CosmosDB Account with CMK.

(Optional) Correlation Id

No response

Metadata

Metadata

Assignees

Type

No type

Projects

Status

In Active Discussion

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions