AzureRM

If we check the resource schema for the windows_web_app resource at version 3.0.2 of the provider, then we see that it is currently missing a definition for the application_stack attribute. It also seems to be missing other blocks specified in the documentation.

You need to file an issue for your error as this is a bug in the provider.

This was a bug, reported as GitHub issue:

• Error: ODataId was nil when creating an azuread_group resource #588

The resolution to the problem in the OP is to upgrade the version from 2.5.0 to 2.6.0 in the required_providers block from the code in the OP above as follows:

To enable this feature, add the following JSON in the capabilities node in your ARM template:

You can have multiple resources in a single output, but to make it work, you need to use some terraform function, or format the output depending on the type, if it is a list, string, map.. When you have a chance, take a look on https://www.terraform.io/language/functions -- I'll show an example that you will have a list of the ids.

1 - By the way, we can't use * in a string like a wildcard, the * is used mostly when we are working with modules, or dynamic resources or your resources that outputs a list, but in any case, putting a * in the resource name will not work. We use * before the attribute from a resource, let's say we have a module that creates an ABC resource and this resource has an id attribute. It would be module.ABC.*.id- but it doesn't work for everything, you need to know what's the type of the output, if it is a string, a list, a map as I said.

3 - I don't work with Azure, but If you go to the doc of that resource on https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/resource_group -- You can see the only exported attribute from this resource is id. Given that, you can do something like:

Terraform creates a hidden folder to store the provider. Make sure you set your OS permissions to see hidden files and folders.

From the documentation:

A hidden .terraform directory, which Terraform uses to manage cached provider plugins and modules, record which workspace is currently active, and record the last known backend configuration in case it needs to migrate state on the next run. This directory is automatically managed by Terraform, and is created during initialization.

Enforce automatic OS upgrade with app health checks is a built-in policy enforced on your subscription / resource group that denies creating a VMSS without automatic OS upgrade enabled.

Use nonsensitive function to disable masking:

Please check the Microsoft Graph permission Directory.ReadWrite.All has been provided to the service connection and it has been granted the admin consent.

I tested the same in my environment where I gave the permission to my service principal but didn't grant admin consent like below :

When deploying the below code, it gave me error :

Error: Error building AzureRM Client: Error populating Client ID from the Azure CLI: No Authorization Tokens were found - please ensure the Azure CLI is installed and then log-in with az login.

This error is due to the Azure CLI version that you are using . There was a breaking change in the Azure CLI version 2.30.0 where Azure migrated the authentication from ADAL to MSAL. For which if you are using Azure CLI latest and Terraform azurerm old then , it will fail in authentication which will result in the error.

To Fix the problem you will have to use the latest Azure CLI version i.e. 2.32.0 and also at the same time try to use the terraform latest azurerm Provider i.e. 2.92.0.

To Upgrade CLI version , You can run az upgrade command and in terraform you can use the below :