Connection to Azure Automation using own Service Principal with KEY

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP



Connection to Azure Automation using own Service Principal with KEY



I'm creating a runbook with Azure Automation and using the cmdlets


$connection = Get-AutomationConnection -Name $Name



The connection is linked to a certificate that has a key. How do I provide a key with this connection cmdlet


Add-AzureRmAccount -ServicePrincipal `
-EnvironmentName "AzureUSGovernment" `
-Tenant $connection.TenantID `
-ApplicationId $connection.ApplicationID `
-CertificateThumbprint $connection.CertificateThumbprint `
-ErrorAction Stop `
|Out-Null



Error:


AADSTS70002: Error validating credentials. AADSTS50012: Client assertion contains an invalid signature. [Reason - The key was not found., Thumbprint of key used by client: 'xxx', Please visit 'https://developer.microsoft.com/en-us/graph/graph-explorer' and query for 'https://graph.microsoft.com/beta/applications/8a09f2d7-8415-4296-92b2-80bb4666c5fc' to see configured keys] Trace ID: adfa5f5d-aaf2-4657-9e5f-1966ad540600 Correlation ID: 68f34f9b-b773-46ed-993e-e06ead5dd6b4 Timestamp: 2018-08-10 02:58:01Z




1 Answer
1



If you want to log in with service principal, you need to create an authentication key to do it, if you create an automation account, it will create an AD app and service principal automatically, more details refer to this post.



Besides, when you getting the SubscriptionId, TenantId, ApplicationId, CertificateThumbprint via the command $connection = Get-AutomationConnection -Name $Name. You should specify it with $connection.FieldDefinitionValues.xxxxx, like -Tenant $connection.FieldDefinitionValues.TenantID.


SubscriptionId


TenantId


ApplicationId


CertificateThumbprint


$connection = Get-AutomationConnection -Name $Name


$connection.FieldDefinitionValues.xxxxx


-Tenant $connection.FieldDefinitionValues.TenantID



So your command should be:


$azurePassword = ConvertTo-SecureString "your key" -AsPlainText -Force
$psCred = New-Object System.Management.Automation.PSCredential($connection.FieldDefinitionValues.ApplicationID, $azurePassword)
Add-AzureRmAccount -ServicePrincipal `
-EnvironmentName "AzureUSGovernment" `
-Tenant $connection.FieldDefinitionValues.TenantID `
-ApplicationId $connection.FieldDefinitionValues.ApplicationID `
-Credential $psCred `
-CertificateThumbprint $connection.FieldDefinitionValues.CertificateThumbprint






By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Popular posts from this blog

Firebase Auth - with Email and Password - Check user already registered

Dynamically update html content plain JS

Creating a leaderboard in HTML/JS