/azure-prepare

Container Apps Environment Variables

Standard Environment Variables

env: [
  {
    name: 'APPLICATIONINSIGHTS_CONNECTION_STRING'
    value: applicationInsights.properties.ConnectionString
  }
  {
    name: 'AZURE_CLIENT_ID'
    value: managedIdentity.properties.clientId
  }
]

Secret References (Key Vault)

Use secrets for sensitive values:

configuration: {
  secrets: [
    {
      name: 'database-url'
      keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url'
      identity: managedIdentity.id
    }
  ]
}

template: {
  containers: [
    {
      env: [
        {
          name: 'DATABASE_URL'
          secretRef: 'database-url'
        }
      ]
    }
  ]
}

Common Variables

Best Practices

• Never hardcode secrets in Bicep
• Use Key Vault references for all sensitive values
• Use Managed Identity for authentication
• Set AZURE_CLIENT_ID for SDK-based auth