Is there an existing issue for this?

• I have searched the existing issues

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave comments along the lines of "+1", "me too" or "any updates", they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Terraform Version

1.2.9

AzureRM Provider Version

~>3.29

Affected Resource(s)/Data Source(s)

azurerm_cosmosdb_account

Terraform Configuration Files

resource "azurerm_cosmosdb_account" "example" {
  name                          = "example-cosmosdb-account"
  location                      = "location"
  resource_group_name           = "resource-group"
  offer_type                    = "Standard"
  kind                          = "GlobalDocumentDB"
  enable_automatic_failover     = true
  public_network_access_enabled = true
  key_vault_key_id              = "https://XXX.managedhsm.azure.net/keys/KEY_NAME/KEY_VERSION"

  identity {
    type = "SystemAssigned"
  }
}

Debug Output/Panic Output

Error: parsing "https://XXX.managedhsm.azure.net/keys/KEY_NAME/KEY_VERSION": internal-error: Managed HSM IDs are not supported as Key Vault Nested Items

Expected Behaviour

The parameter key_vault_key_id should accept a value with ".managedhsm."
or
The parameter managed_hsm_key_id should be added

Actual Behaviour

Terraform throw an error:
Error: parsing "https://XXX.managedhsm.azure.net/keys/KEY_NAME/KEY_VERSION": internal-error: Managed HSM IDs are not supported as Key Vault Nested Items

Steps to Reproduce

1. terraform plan

Important Factoids

No response

References

• Same issue here with azurerm_postgresql_flexible_server :azurerm_postgresql_flexible_server: support for Key Vault Keys from a Managed HSM #26338