envs

Azure — service principal

azure/credentials · version 1

envs add azure/credentials

This declares the keys below in your catalog and sets none of them. A template is a schema for keys; it never carries a value.

Key Needed Kind Notes
AZURE_TENANT_ID required secret Which directory. Azure states no sensitivity for it, and it is one of the three values that together authenticate, so it is kept with them.. where to get it
AZURE_CLIENT_ID required secret The app registration. Azure never says this may be published, so it is not treated as public here.. where to get it
AZURE_CLIENT_SECRET optional secret One of two ways to prove the app registration. Azure shows the value once. Add a new secret before removing the old; there is no editing one in place.. where to get it
AZURE_CLIENT_CERTIFICATE_PATH optional secret The other way: a path to a certificate and private key in PEM or PFX. Set this or the secret above, not both.. where to get it
AZURE_CLIENT_CERTIFICATE_PASSWORD optional secret Protects that file, when it is a PFX.. where to get it

The JSON the CLI reads