azure_msi_create_user_assigned_managed_identity_with_default_credential.py

1import os
2from azure.identity import DefaultAzureCredential
3from azure.mgmt.msi import ManagedServiceIdentityClient
4
5def run():
6    # Authenticate using default Azure credentials
7    # Ensure AZURE_SUBSCRIPTION_ID is set in your environment variables
8    subscription_id = os.environ.get("AZURE_SUBSCRIPTION_ID", None)
9    credential = DefaultAzureCredential()
10
11    # Initialize the Managed Service Identity Management Client
12    msi_client = ManagedServiceIdentityClient(
13        credential=credential,
14        subscription_id=subscription_id
15    )
16
17    # Configuration for the identity
18    RESOURCE_GROUP_NAME = "myResourceGroup"
19    IDENTITY_NAME = "myUserAssignedIdentity"
20    LOCATION = "eastus"
21
22    # Create or update a user-assigned identity
23    identity = msi_client.user_assigned_identities.create_or_update(
24        resource_group_name=RESOURCE_GROUP_NAME,
25        resource_name=IDENTITY_NAME,
26        parameters={
27            "location": LOCATION
28        }
29    )
30
31    print(f"Created Identity: {identity.name}")
32    print(f"Principal ID: {identity.principal_id}")
33    print(f"Client ID: {identity.client_id}")
34
35if __name__ == "__main__":
36    run()