added credential_utils file in script folder and changed the import paths

Author: Prasanjeet-Microsoft

infra/app/function.bicep

@@ -131,7 +131,7 @@ module function '../core/host/functions.bicep' = {
   }
 }
 
-resource functionNameDefaultClientKey 'Microsoft.Web/sites/host/functionKeys@2024-11-01' = {
+resource functionNameDefaultClientKey 'Microsoft.Web/sites/host/functionKeys@2018-11-01' = {
   name: '${name}/default/clientKey'
   properties: {
     name: 'ClientKey'

infra/main.json

@@ -5,7 +5,7 @@
     "_generator": {
       "name": "bicep",
       "version": "0.36.177.2456",
-      "templateHash": "10039984803618451944"
+      "templateHash": "16352542150707902119"
     }
   },
   "parameters": {
@@ -8490,7 +8490,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.36.177.2456",
-              "templateHash": "13598371285445269439"
+              "templateHash": "4396932483281426377"
             }
           },
           "parameters": {
@@ -8604,7 +8604,7 @@
           "resources": [
             {
               "type": "Microsoft.Web/sites/host/functionKeys",
-              "apiVersion": "2024-11-01",
+              "apiVersion": "2018-11-01",
               "name": "[format('{0}/default/clientKey', parameters('name'))]",
               "properties": {
                 "name": "ClientKey",
@@ -9794,7 +9794,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.36.177.2456",
-              "templateHash": "13598371285445269439"
+              "templateHash": "4396932483281426377"
             }
           },
           "parameters": {
@@ -9908,7 +9908,7 @@
           "resources": [
             {
               "type": "Microsoft.Web/sites/host/functionKeys",
-              "apiVersion": "2024-11-01",
+              "apiVersion": "2018-11-01",
               "name": "[format('{0}/default/clientKey', parameters('name'))]",
               "properties": {
                 "name": "ClientKey",

scripts/data_scripts/azure_credential_utils.py

@@ -0,0 +1,48 @@
+import os
+from azure.identity import ManagedIdentityCredential, DefaultAzureCredential
+from azure.identity.aio import (
+    ManagedIdentityCredential as AioManagedIdentityCredential,
+    DefaultAzureCredential as AioDefaultAzureCredential,
+)
+
+
+async def get_azure_credential_async(client_id=None):
+    """
+    Returns an Azure credential asynchronously based on the application environment.
+
+    If the environment is 'dev', it uses AioDefaultAzureCredential.
+    Otherwise, it uses AioManagedIdentityCredential.
+
+    Args:
+        client_id (str, optional): The client ID for the Managed Identity Credential.
+
+    Returns:
+        Credential object: Either AioDefaultAzureCredential or AioManagedIdentityCredential.
+    """
+    if os.getenv("APP_ENV", "prod").lower() == "dev":
+        return (
+            AioDefaultAzureCredential()
+        )  # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in development
+    else:
+        return AioManagedIdentityCredential(client_id=client_id)
+
+
+def get_azure_credential(client_id=None):
+    """
+    Returns an Azure credential based on the application environment.
+
+    If the environment is 'dev', it uses DefaultAzureCredential.
+    Otherwise, it uses ManagedIdentityCredential.
+
+    Args:
+        client_id (str, optional): The client ID for the Managed Identity Credential.
+
+    Returns:
+        Credential object: Either DefaultAzureCredential or ManagedIdentityCredential.
+    """
+    if os.getenv("APP_ENV", "prod").lower() == "dev":
+        return (
+            DefaultAzureCredential()
+        )  # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in development
+    else:
+        return ManagedIdentityCredential(client_id=client_id)

scripts/data_scripts/create_postgres_tables.py

@@ -1,4 +1,4 @@
-from ..helpers.azure_credential_utils import get_azure_credential
+from azure_credential_utils import get_azure_credential
 import psycopg2
 from psycopg2 import sql