Static web app to use Service connection

Question

Hello,

How can I use a service connection (service principal) in the deployment of a static web app from Azure DevOps? When creating static web apps from the portal and taking code from Azure DevOps, it creates a Personal Access Token (PAT). Can I use service connections instead of PATs during the first deployment? If so, how do I set it up or does it require additional steps or steps in some kind of different order ?

Answer 1

Hello @Bombbe

When using Azure DevOps to deploy Static WebApp you can use AzureStaticWebApp@0 task
It supports Azure Static Web Apps api token(azure_static_web_apps_api_token) to authenticate between Azure DevOps and Static WebApp.

Here is an example

trigger:
  - main

pool:
  vmImage: ubuntu-latest

steps:
  - checkout: self
    submodules: true
  - task: AzureStaticWebApp@0
    inputs:
      app_location: '/build'
      api_location: 'api'
      output_location: '/output'
      azure_static_web_apps_api_token: $(deployment_token)

References:
https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/azure-static-web-app-v0?view=azure-pipelines

https://www.daveabrock.com/2021/04/01/static-web-apps-azure-pipelines/

Answer 2

@Bombbe Thank you to @Andriy Bilous for providing a very helpful answer. I have just the one below item to add to their wonderful answer. Otherwise, let either of us know if you have any further questions.

Please note that the service principal must have the Contributor role on the subscription or resource group that contains your static web app to be able to deploy it. Also, make sure that you have the necessary permissions to create a service principal and service connection in Azure DevOps.