Skip a parameter if its not defined in a loop

[cr0wen]

Hello,
Im working with loops and im have some issues and wondering if there is a way around it or if its by design.

module.bicep
resource policyAssignments 'Microsoft.Authorization/policyAssignments@2024-04-01' = {
  name: name
  scope: managementGroup()
  location: location
  identity: identity
  properties: {
    displayName: displayName
    description: policyDescription
    policyDefinitionId: policyDefinitionId
    parameters: parameters
    enforcementMode: enforcementMode

  }
}

main.bicep
module PolicyAssignments '../module.bicep'= [for policy in varpolicyAssignments:{
  name: policy.name
  scope: managementGroup(managementGroupId)
  params: {
    displayName: policy.properties.displayName
    policyDescription: policy.properties.description
    policyDefinitionId: policy.properties.policyDefinitionId
    parameters: policy.properties.parameters
    name: policy.name
    location: location
    enforcementMode: policy.properties.?enforcementMode
    nonComplianceMessages: policy.properties.nonComplianceMessages.value
    identity: policy.properties.identity

  }
}]

Now to the problem that i have. I have one policy that will use a identity and the other does not have a identity. The policy with a identity works because its defined in the policywithidentity.json file, but the other policywithoutidentity.json does not have idenity value defined in it. So the deployment fails, Is there a way to work around this?

[arnor-ingthorsson]

You could make the identity parameter optional much like you're doing with enforcementMode.

Then do something like this:

param identity object?

resource policyAssignments 'Microsoft.Authorization/policyAssignments@2024-04-01' = {
  name: name
  scope: managementGroup()
  location: location
  identity: identity ?? null
  properties: {
    displayName: displayName
    description: policyDescription
    policyDefinitionId: policyDefinitionId
    parameters: parameters
    enforcementMode: enforcementMode

  }
}

[cr0wen]

If i understand it correctly, it will still require identity to be present in the json file? Because if i just write it as null, the main.bicep file is complaining that identity is not defined. "The type "object" does not contain property "identity"." It boils down to, can i have a different set of properties or do they need to be identical in each json file?

[cr0wen]

can be closed

[guimatheus92]

You can close your own open discussion at the bottom of the page.