Question

我无法使用/ regenerateKey [1]为Azure管理API重新生成存储帐户的密钥。

我在JavaScript中使用以下代码（资源已删除订阅）

const { ClientSecretCredential } = require('@azure/identity');
const { SecretClient } = require('@azure/keyvault-secrets');
const MSRestAzure = require('ms-rest-azure');

const keyVaultName = process.env.KEY_VAULT_NAME;
const KVUri = `https://${keyVaultName}.vault.azure.net`;

const credential = new ClientSecretCredential(
  process.env.AZURE_TENANT_ID,
  process.env.AZURE_CLIENT_ID,
  process.env.AZURE_CLIENT_SECRET,
);

const vault = new SecretClient(KVUri, credential);

function getCreds() {
  return new Promise((res, rej) => {
    MSRestAzure.loginWithServicePrincipalSecret(
      process.env.AZURE_CLIENT_ID,
      process.env.AZURE_CLIENT_SECRET,
      process.env.AZURE_TENANT_ID,
      (err, creds) => {
        if (err) {
          rej(err);
          return;
        }
        res(creds);
      },
    );
  });
}

const getResourceUrl = (resource, action) => `https://management.azure.com${resource}/${action}?api-version=2019-04-01`;
const resource = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myRg/providers/Microsoft.Storage/storageAccounts/MyStore


const creds = await getCreds();
const client = new MSRestAzure.AzureServiceClient(creds);

const regenUrl = getResourceUrl(resource, 'regenerateKey');

await client.sendRequest({ method: 'POST', url: regenUrl }).then(console.log);

我收到UnexpectedException的回复-

{
    "error": {
        "code": "UnexpectedException",
        "message": "The server was unable to complete your request."
    }
}

客户ID /机密属于一个应用程序注册，可以访问该存储帐户以及该订阅中的贡献者和存储帐户密钥操作员。

我认为我没有正确地提出要求。

Answer 1

如果我未指定请求正文，则能够重现该错误。

请以以下格式提供请求正文：

{
    keyName: "key1 or key2 (basically which key you want to regenerate)"
}

无法使用Azure Management API重新生成存储密钥

1 个答案: