Is there a way to populate Key Vault certificate contacts using Bicep?

[a8ree]

I have found a powershell method Add-AzKeyVaultCertificateContact
however it would be neater to be able to achieve this in bicep

[levimatheri]

Unfortunately I believe this would require Microsoft.KeyVault/vaults/certificates resource definition which is not supported today.

[johnlokerse]

@a8ree You can try to achieve this via the deployment script resource: https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-bicep?tabs=CLI

If you require private connectivity (because deployment scripts use an Azure container registry under the hood) there's a solution too: https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-vnet-private-endpoint

With deployment scripts you can be a bit more flexible, because you can run PowerShell scripts using Azure Bicep.

[johnlokerse]

@a8ree Check out the answer from @brwilkinson here how he leverages deployment scripts: #10044 (comment)