Please suggest how to deploy into multiple subscriptions in bicep.

[azureiac]

Hi ,

Please suggest how can I deploy virtual network configuration using single parameter file for multiple subscriptions.

vnet.bicep
vnet.parameters.json
vnetmodule.bicep

[brwilkinson]

in order to do this you will need to use a Subscription level deployment and a Module.

The module has a scope property that you can reference the subscription + resource group that you want to deploy into.

https://docs.microsoft.com/en-us/azure/azure-resource-manager/bicep/modules#configure-module-scopes

Notice that the resourcegroup() method can take the parameters for the subscription and the resourcegroup and can be used for the Scope property

resourceGroup(subscriptionId, resourceGroupName)

https://docs.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-scope#resourcegroup

[azureiac]

@brwilkinson : I am using Bicep CLI version 0.4.63 (7ebed03)
I am using azure devops pipeline to run the bicep file which first building bicep files and then deploying the json file using ARM devops task

task: AzureCLI@2
inlineScript: 'az bicep build --file

task: AzureResourceManagerTemplateDeployment@3

network-module.bicep

targetScope = 'subscription'

param vnet object
param environment string

resource commonVnet 'Microsoft.Network/virtualNetworks@2020-11-01' = {
name: vnet.name
location: resourceGroup().location
properties: {
addressSpace: {
addressPrefixes: [
vnet.addressPrefix
]
}
subnets: [for subnet in vnet.subnets: {
name: subnet.name
properties: {
addressPrefix: subnet.addressPrefix
}
}]
virtualNetworkPeerings: []
enableDdosProtection: false

}
}

main.bicep

targetScope='subscription'

param vnet object
param environment string

module network '../modules/network.module.bicep' = {
name: '${vnet.name}deployment'
scope: subscription()
params: {
vnet:vnet
environment:environment
}
}

[brwilkinson]

Please share the yaml from your pipeline task.

Confirm deploymentScope is subscription?

[azureiac]

@brwilkinson : before moving the above code to azure repos and running pipeline , I am getting module errors in VS code itself so I am confused in that.

Scope "subscription" is not valid for this resource type. Permitted scopes: "resourceGroup".

[brwilkinson]

Please share a screen shot.

[brwilkinson]

The resources that you are deploying must be deployed into a resource group.

It's fine for the parent template to go into the subscription, however resources themselves must be created in a resource group.

[azureiac]

@brwilkinson : screenshot attached

[brwilkinson]

Yes, see the comment above.

Certain things like role assignments, policy or role definitions can be created at the subscription level.

However resources themselves such as vnet, must be deployed in a resource group.

[azureiac]

@brwilkinson : I am successfully able to deploy the code in one subscription using default scope : resource group and module functionality in bicep no problem in that.

But use case is now to deploy into multiple subscriptions using service principal on management group level and parent management group has 3 childs and subscriptions under that . deployment to be scope at management group level so that it can go one level down to subscriptions and deploy into resource groups.

[brwilkinson]

As mentioned above.

Notice that the resourcegroup() method can take the parameters for the subscription and the resourcegroup and can be used for the Scope property

resourceGroup(subscriptionId, resourceGroupName)

https://docs.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-scope#resourcegroup

[azureiac]

Thanks @brwilkinson for prompt response have a nice day ahead !!!!

[brwilkinson]

great, glad you were able to resolve the scope to the given Subscription and Resource group combination.