From f80386f4d9ac81be8669afda13d31538a8ac47d2 Mon Sep 17 00:00:00 2001
From: Adam <103067949+AdamL-Microsoft@users.noreply.github.com>
Date: Wed, 28 Jun 2023 13:37:01 -0700
Subject: [PATCH] Updated keyvault access policy (#3109)

* updated keyvault access policy for function app compatibility
---
 src/deployment/azuredeploy.bicep | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/deployment/azuredeploy.bicep b/src/deployment/azuredeploy.bicep
index 9c8d3b07b..4f655cb09 100644
--- a/src/deployment/azuredeploy.bicep
+++ b/src/deployment/azuredeploy.bicep
@@ -98,6 +98,7 @@ resource keyVault 'Microsoft.KeyVault/vaults@2021-10-01' = {
   location: location
   properties: {
     enabledForDiskEncryption: false
+    enabledForDeployment: true
     enabledForTemplateDeployment: true
     sku: {
       family: 'A'
@@ -125,14 +126,16 @@ resource keyVault 'Microsoft.KeyVault/vaults@2021-10-01' = {
         }
       }
       {
-        objectId: 'abfa0a7c-a6b6-4736-8310-5855508787cd'
+        objectId: 'b453993d-81d4-41a7-be3a-549bc2435ffa'
         tenantId: tenantId
         permissions: {
           secrets: [
             'get'
+            'list'
           ]
           certificates: [
             'get'
+            'list'
           ]
         }
       }