Get KeyVault secret from parameters

[guimatheus92]

I am trying to create a Data Store from Machine Learning Workspace that uses Service Principal, because I cannot use Access Key authentication type because my storage account has disabled that option.

So I found out here we can use the az.getSecret function in a .bicepparam file to get the secret from a Key Vault and connect to a given Data Lake Gen2 using Service Principal with that secret:

This is the way I did on my parameter file (I have hidden some values):

param keyVaultSecret = az.getSecret('__SUBSCRIPTION__', '__RESOURCE_GROUP_NAME__', '__KEY_VAULT_NAME__', 'AVDDIMultiTenantCertificate', 'Latest version')

When I deploy I get this error:

ActionExecutionFailed: Error: Code=KeyVaultParameterReferenceSecretRetrieveFailed; Message=The secret of KeyVault parameter 'keyVaultSecret' cannot be retrieved. Http status code: 'BadRequest'. Error message: 'Method GET does not allow operation 'Latest version''. Please see https://aka.ms/arm-keyvault for usage details.

But I was trying to use Latest Version as we do similar on ADF and Synapse (is it possible?):

[GABRIELNGBTUC]

Remove the last parameter passed to az.getSecret as it is an optional property that should be set only when retrieving a version that is not the latest https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-parameters-file#getsecret

[guimatheus92]

Thanks! That fixed my problem but to be honest I wasn't able to retrieve the secret yet because of permissions, I have added Contributor, Key Vault Certificate User and Key Vault Secrets User but still getting permissions denied issue. Either way I will mark your answer as correct because you fixed the error problem, thank you once again!