Skip to content

Conversation

@Abdul-Microsoft
Copy link
Contributor

Purpose

This pull request introduces several changes to the infra deployment files for AI Foundry. The updates primarily focus on transitioning the AI services authentication method from API key-based to Azure Active Directory (AAD), modifying parameter handling, and adding new role assignments for AI projects. Below is a categorized summary of the most important changes:

Authentication Method Update:

  • Changed the authType for AI services from 'ApiKey' to 'AAD' in the aiHub resource definition, and removed the credentials block that previously used the API key. (infra/deploy_ai_foundry.bicep, infra/main.json) [1] [2]

Parameter Adjustments:

  • Replaced the aiServices object parameter with a simpler aiServicesKey string parameter, affecting multiple references to AI service keys. (infra/deploy_ai_foundry.bicep, infra/main.bicep) [1] [2] [3] [4]

Role Assignment for AI Projects:

  • Added a new resource aiDevelopertoAIProject to assign the aiDeveloper role to AI projects, enabling specific permissions for project identities. (infra/deploy_ai_foundry.bicep, infra/main.json) [1] [2]

Template Metadata Updates:

  • Updated the templateHash values in infra/main.json to reflect the changes in the deployment templates. (infra/main.json) [1] [2]

These changes collectively improve security by adopting AAD for authentication, simplify parameter management, and enhance role-based access control for AI projects.

  • ...

Does this introduce a breaking change?

  • Yes
  • No

How to Test

  • Get the code
git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install
  • Test the code

What to Check

Verify that the following are valid

  • ...

Other Information

@Roopan-Microsoft Roopan-Microsoft merged commit dc23cba into dev May 13, 2025
7 of 8 checks passed
@Roopan-Microsoft Roopan-Microsoft deleted the feature/dev-localauthchanges branch May 13, 2025 18:05
@github-actions
Copy link

🎉 This PR is included in version 1.5.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

blessing-msft pushed a commit that referenced this pull request Aug 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants