ARM Templates

Deployment Mode

• Incremental: default, leave resources unchanged if they aren't described in template

• Complete: if the resource is not in the template, it get deleted

az deployment group create --mode complete \
--name ExampleDeployment \
--resource-group ExampleResourceGroup \
--template-file storage.json

Manage Template Specs

az ts create -g testRG --name TemplateSpecName -l WestUS --display-name "MyDisplayName" --description "Simple template spec" --tags key1=value1

• https://learn.microsoft.com/en-us/cli/azure/ts?view=azure-cli-latest

Using key vault in template

Reference

• Azure subscription and service limits, quotas, and constraints

• Integrate Azure Key Vault in your ARM template deployment