Policy: Azure > Key Vault > Vault > Tags > Template

The template is used to generate the keys and values for Azure Key Vault vault.

Tags not defined in Vault Tags Template will not be modified or deleted. Setting a tag value to undefined will result in the tag being deleted.

See Tags for more information.

Resource Types

This policy targets the following resource types:

Azure > Key Vault > Vault

Primary Policy

This policy is used with the following primary policy:

Azure > Key Vault > Vault > Tags

Controls

Azure > Key Vault > Vault > Tags

Policy Specification

Default template	`{%- if $.defaultTags.value \| length == 0 %} [] {%- elif $.defaultTags.value != undefined %}{{ $.defaultTags.value \| dump \| safe }}{%- else %}{% for item in $.defaultTags.value %}- {{ item }}{% endfor %}{% endif %}`
Default template input	`- \| { subscription { turbot { id } } } - \| { defaultTags: policyValue(uri:"tmod:@turbot/azure-keyvault#/policy/types/keyVaultTagsTemplate" resourceId: "{{ $.subscription.turbot.id }}") { value } }`
Examples [YAML]	`foo: bar environment: prod` `- foo123: bar - environment: dev` `- cost-center: zz123 - delete-me: undefined`

Default template

{%- if $.defaultTags.value | length == 0 %} [] {%- elif $.defaultTags.value != undefined %}{{ $.defaultTags.value | dump | safe }}{%- else %}{% for item in $.defaultTags.value %}- {{ item }}{% endfor %}{% endif %}

Default template input

- |
  {
    subscription {
      turbot {
        id
      }
    }
  }
- |
  {
    defaultTags: policyValue(uri:"tmod:@turbot/azure-keyvault#/policy/types/keyVaultTagsTemplate" resourceId: "{{ $.subscription.turbot.id }}") {
      value
    }
  }

Examples [YAML]

foo: bar
environment: prod

- foo123: bar
- environment: dev

- cost-center: zz123
- delete-me: undefined

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceTags

Policy Type URI

tmod:@turbot/azure-keyvault#/policy/types/vaultTagsTemplate

GraphQL

query policyType(id: "tmod:@turbot/azure-keyvault#/policy/types/vaultTagsTemplate") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-keyvault#/policy/types/vaultTagsTemplate'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-keyvault#/policy/types/vaultTagsTemplate'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-keyvault#/policy/types/vaultTagsTemplate"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-keyvault#/policy/types/vaultTagsTemplate"