通过Bicep部署Logic App与Azure Automation连接失败求助

我通过Bicep完成了Azure Automation账户、Runbook、Logic App及API连接的部署，部署流程显示成功，但Logic App与Azure Automation的连接始终无法建立。尝试过设置parametervalueType='alternative'等方法仍未解决，相关Bicep代码如下：

resource workflows_newlogic06_name_resource 'Microsoft.Logic/workflows@2016-06-01' = {
  name: workflows_newlogic06_name
  location:location
  properties: {
    state: 'Enabled'
    definition: {
      '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#'
      contentVersion: '1.0.0.0'
      parameters: {
        '$connections': {
          defaultValue: {}
          type: 'Object'
        }
      }
      triggers: {
        Recurrence: {
          recurrence: {
            frequency: 'Month'
            interval: 3
          }
          evaluatedRecurrence: {
            frequency: 'Month'
            interval: 3
          }
          type: 'Recurrence'
        }
      }
      actions: {
        Create_job: {
          runAfter: {}
          type: 'ApiConnection'
          inputs: {
            host: {
              connection: {
                name: '@parameters(\'$connections\')[\'azureautomation_1\'][\'connectionId\']'
              }
            }
            method: 'put'
            path: '/subscriptions/@{encodeURIComponent(\'${subscriptionid}\')}/resourceGroups/@{encodeURIComponent(\'nextone1\')}/providers/Microsoft.Automation/automationAccounts/@{encodeURIComponent(\'newauto01\')}/jobs'
            queries: {
              wait: true
              'x-ms-api-version': '2015-10-31'
            }
          }
        }
        Get_job_output: {
          runAfter: {
            Create_job: [
              'Succeeded'
            ]
          }
          type: 'ApiConnection'
          inputs: {
            host: {
              connection: {
                name: '@parameters(\'$connections\')[\'azureautomation_1\'][\'connectionId\']'
              }
            }
            method: 'get'
            path: '/subscriptions/@{encodeURIComponent(\'{subscriptionid}\')}/resourceGroups/@{encodeURIComponent(\'nextone1\')}/providers/Microsoft.Automation/automationAccounts/@{encodeURIComponent(\'newauto01\')}/jobs/@{encodeURIComponent(body(\'Create_job\')?[\'properties\']?[\'jobId\'])}/output'
            queries: {
              'x-ms-api-version': '2015-10-31'
            }
          }
        }
      }
      outputs: {}
    }
    parameters: {
      '$connections': {
        value: {
          azureautomation_1: {
            connectionId: connections_azureautomation_externalid
            connectionName: 'azureautomation'
            id: '/subscriptions/{subscriptionid}/providers/Microsoft.Web/locations/eastus/managedApis/azureautomation'
          }
        }
      }
    }
  }
}

resource connections_azureautomation_name_resource 'Microsoft.Web/connections@2016-06-01' = {
  name: connections_azureautomation_name
  location: location
  properties: {
    displayName: 'new-c0n-01'
    statuses: [
      {
        status: 'Ready'
      }
    ]
    customParameterValues: {}
    createdTime: '2023-09-26T11:35:24.8852931Z'
    changedTime: '2023-09-26T11:35:24.8852931Z'
    api: {
      name: connections_azureautomation_name
      displayName: 'Azure Automation'
      description: 'Azure Automation provides tools to manage your cloud and on-premises infrastructure seamlessly.'
      iconUri: 'https://connectoricons-prod.azureedge.net/u/shgogna/globalperconnector-train1/1.0.1639.3312/${connections_azureautomation_name}/icon.png'
      brandColor: '#56A0D7'
      id:subscriptionResourceId('Microsoft.web/locations/managedApis', location, 'azureautomation')
      type: 'Microsoft.Web/locations/managedApis'
      }
  }
}

核心问题排查点 #

• API连接未完成身份验证：部署的Microsoft.Web/connections资源仅包含基础配置，但Azure Automation连接器需要身份验证信息（如服务主体、托管标识）才能建立有效连接。当前代码中customParameterValues为空，也未配置身份验证属性，导致连接实际处于未授权状态。
• 连接ID引用错误：Logic App的$connections参数中，connectionId使用了connections_azureautomation_externalid变量，需确认该变量是否正确指向部署的connections_azureautomation_name_resource的资源ID。建议直接使用connections_azureautomation_name_resource.id来确保引用准确。
• 硬编码订阅ID占位符：Logic App定义的path中存在{subscriptionid}硬编码占位符，应替换为Bicep动态变量subscription().subscriptionId，否则会导致路径解析失败。
• API版本兼容性问题：当前使用的Azure Automation API版本为2015-10-31，版本过旧可能引发兼容性问题，建议升级至较新版本（如2023-11-01）。
• 连接名称引用不一致：Logic App定义中引用的连接键名为azureautomation_1，但实际连接资源名称为connections_azureautomation_name，需确保两者的引用键名与连接名称匹配。

修正后的代码示例（关键部分调整） #

// 修正API连接资源，添加服务主体身份验证
resource connections_azureautomation_name_resource 'Microsoft.Web/connections@2016-06-01' = {
  name: connections_azureautomation_name
  location: location
  properties: {
    displayName: 'new-c0n-01'
    api: {
      id: subscriptionResourceId('Microsoft.Web/locations/managedApis', location, 'azureautomation')
    }
    // 添加身份验证参数，假设使用服务主体
    parameterValues: {
      tenantId: tenant().tenantId
      clientId: '<你的服务主体Client ID>'
      clientSecret: '<你的服务主体客户端密钥>'
    }
    customParameterValues: {}
  }
}

// 修正Logic App的$connections参数引用
resource workflows_newlogic06_name_resource 'Microsoft.Logic/workflows@2016-06-01' = {
  name: workflows_newlogic06_name
  location: location
  properties: {
    state: 'Enabled'
    definition: {
      // ... 其他定义保持不变
      actions: {
        Create_job: {
          inputs: {
            path: '/subscriptions/@{encodeURIComponent(\'${subscription().subscriptionId}\')}/resourceGroups/@{encodeURIComponent(\'nextone1\')}/providers/Microsoft.Automation/automationAccounts/@{encodeURIComponent(\'newauto01\')}/jobs'
            // ... 其他输入保持不变
          }
        }
        Get_job_output: {
          inputs: {
            path: '/subscriptions/@{encodeURIComponent(\'${subscription().subscriptionId}\')}/resourceGroups/@{encodeURIComponent(\'nextone1\')}/providers/Microsoft.Automation/automationAccounts/@{encodeURIComponent(\'newauto01\')}/jobs/@{encodeURIComponent(body(\'Create_job\')?[\'properties\']?[\'jobId\'])}/output'
            // ... 其他输入保持不变
          }
        }
      }
    }
    parameters: {
      '$connections': {
        value: {
          azureautomation_1: {
            connectionId: connections_azureautomation_name_resource.id
            connectionName: connections_azureautomation_name
            id: subscriptionResourceId('Microsoft.Web/locations/managedApis', location, 'azureautomation')
          }
        }
      }
    }
  }
}

内容的提问来源于stack exchange，提问作者saistack1