Azure Blueprints: Securestring parameters in assignment.json

Question

It seems I have easy question, but I was not able to find any details about it anywhere:

How properly fill parameter in assignment.json file for Azure Blueprint, if this parameter has type: "securestring" in Blueprint.json file.

Answer 1

The easiest and secure way of doing this is to store this string in a KeyVault and use the secret reference in the blueprint artifact. For example:

"vmLocalAdminPassword": {
    "reference": {
        "keyVault": {
            "id": "/subscriptions/<subscriptionId>/resourceGroups/<resourceGroupName>/providers/Microsoft.KeyVault/vaults/<keyVaultName>"
        },
        "secretName": "vmLocalAdminPassword"
    }
}