📐 ARM / Bicep Lab Tracker

// targetScope (default: resourceGroup)
targetScope = 'subscription'

// Parameters with decorators
@description('Storage account name')
@minLength(3) @maxLength(24)
@allowed(['Standard_LRS', 'Premium_LRS'])
param storageAccountName string
param location string = resourceGroup().location

@secure()
param adminPassword string

// Variable
var uniqueName = '${storageAccountName}${uniqueString(resourceGroup().id)}'

// Resource
resource sa 'Microsoft.Storage/storageAccounts@2023-01-01' = {
  name: toLower(uniqueName)
  location: location
  sku: { name: 'Standard_LRS' }
  kind: 'StorageV2'
}

// Output
output blobEndpoint string = sa.properties.primaryEndpoints.blob

// Resource loop
param storageNames array = ['sa1', 'sa2']

resource saLoop 'Microsoft.Storage/storageAccounts@2023-01-01' = [for name in storageNames: {
  name: name
  location: location
  sku: { name: 'Standard_LRS' }
  kind: 'StorageV2'
}]

@batchSize(2) // deploy 2 at a time (serial)
resource saSerial ... = [for name in storageNames: { ... }]

// Conditional resource
resource sa 'Microsoft.Storage/storageAccounts@2023-01-01' = if (deployStorage) {
  name: storageAccountName
  ...
}

// Existing resource (read-only reference)
resource existingSa 'Microsoft.Storage/storageAccounts@2023-01-01' existing = {
  name: existingStorageName
}

// Local module
module sa './modules/storage.bicep' = {
  name: 'storageDeploy'
  params: {
    name: storageAccountName
    location: location
  }
}

// Access module output
output endpoint string = sa.outputs.blobEndpoint

// Registry module (ACR)
module sa 'br:myacr.azurecr.io/bicep/storage:v1.0' = { ... }

// Public registry module
module sa 'br/public:storage/storage-account:0.4' = { ... }

// Template Spec as module
module app 'ts:<sub-id>/myRG/mySpec:1.0' = { ... }

// params.json — reference KV secret at deploy time
{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "adminPassword": {
      "reference": {
        "keyVault": {
          "id": "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.KeyVault/vaults/<kv>"
        },
        "secretName": "adminPassword"
      }
    }
  }
}