This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I have been struggling with the below error for quite some time. I haven't been able to find any solution on how to fix this. There are only discussion available on this topic why this being caused but no solution on how to fix this. May be someone here can help me with the solution on this platform. This below error comes when I try to deploy/fetch data from terraform of Azure Key vault.
╷
│ Error: expected "access_policy.0.object_id" to be a valid UUID, got
│
│ with module.main_kv_001.azurerm_key_vault.vault,
│ on ../../XXXXX/shared/keyvault/main.tf line 28, in resource "azurerm_key_vault" "vault":
│ 28: object_id = data.azurerm_client_config.current.object_id
│
╵
Releasing state lock. This may take a few moments...
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXX/scaffold$
Here is my configuration-
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$ az account show --query "{subscriptionId:id, tenantId:tenantId,objectId:objectId}"
{
"objectId": null,
"subscriptionId": "XXXXXXXXXX",
"tenantId": "XXXXXXXXXX"
}
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$ az version
{
"azure-cli": "2.42.0",
"azure-cli-core": "2.42.0",
"azure-cli-telemetry": "1.0.8",
"extensions": {
"account": "0.2.3"
}
}
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$ terraform -v
Terraform v1.3.5
on linux_amd64
+ provider registry.terraform.io/hashicorp/azurerm v3.4.0
+ provider registry.terraform.io/hashicorp/local v2.2.3
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
@Kaushalendra Kumar
Thank you for your post!
Error Message:
expected "access_policy.0.object_id" to be a valid UUID, got
From your error message, it looks like this is related to the Access Policy Object ID - but in order to gain a better understanding of your issue, can you share any documentation that you're following when creating this Terraform script? I'll try to repro this on my end and see if I run into a similar issue.
Any additional information or screenshots would also be helpful.
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Thanks for your response. Actually I am not following any documentation. I receive this error when I try to create a Azure Key Vault using terraform or try to read value of already created Azure Key Vault secret using Terraform "data". I am using AZ CLI and Terraform installed on my Ubuntu which is running on my Windows 10 laptop on top ofWSL.
Other details-
Terraform v1.3.5
azure-cli": "2.42.0"
@Kaushalendra Kumar
Thank you for following up on this!
I'm not too familiar with using Terraform scripts, but from your error - expected "access_policy.0.object_id" to be a valid UUID, it seems like the issue is related to the azurerm_key_vault_access_policy resource. Can you make sure that you set it correctly so that the object_id = data.azurerm_client_config.current.object_id, is set to a user, service principal or security group in the Azure Active Directory tenant of the Key Vault.
resource "azurerm_key_vault" "example" {
name = "examplekeyvault"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
tenant_id = data.azurerm_client_config.current.tenant_id
sku_name = "premium"
}
resource "azurerm_key_vault_access_policy" "example" {
key_vault_id = azurerm_key_vault.example.id
tenant_id = data.azurerm_client_config.current.tenant_id
object_id = data.azurerm_client_config.current.object_id
key_permissions = [
"Get",
]
secret_permissions = [
"Get",
]
}
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
@Kaushalendra Kumar
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
My kv_access_policy is set properly and I am still getting the very same error. Here my code-
resource "azurerm_key_vault_access_policy" "kv_access_policy" {
key_vault_id = data.azurerm_key_vault.data_bootstrapkv.id
tenant_id = data.azurerm_client_config.current.tenant_id
object_id = data.azurerm_client_config.current.object_id
key_permissions = ["Get", "List"]
secret_permissions = ["Get", "List", "Set", "Recover", "Delete", "Purge"]
storage_permissions = ["Get"]
}
I think what is wrong with it is Azure CLI. Looks at the results below-
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$ az account show --query "{subscriptionId:id, tenantId:tenantId,objectId:objectId}"
{
"objectId": null,
"subscriptionId": "XXXXXXXXXX",
"tenantId": "XXXXXXXXXX"
}
kaus3778@AAD-4MLD9K3:/mnt/c/projects/XXXXXX/scaffold$
And I don't know how to fix this.
@Kaushalendra Kumar
Thank you for following up on this and I apologize for the delayed response!
Since your kv_access_policy resource is set properly but you're still getting the same error, I'd recommend reaching out to the Terraform Community or Terraform Support so their experts can look into your issue as well since this seems to be more related to your Terraform script than the Azure Key Vault.
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 85%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHD%3C/text%3E%3C/svg%3E)
I was struggling with this for the past 2 days and found that terraform version was outdated on my system. All I did was upgraded to the latest version (terrform init -upgrade) - guess what, it just worked man!