Microsoft.DesktopVirtualization/hostPools/sessionHostConfigurations@2024-08-08-preview should be an allowed trusted microsoft service for keyvault

[raymonvtu]

Bicep version
Bicep CLI version 0.31.92 (b06509316a)

Describe the bug
when deploying the new session host configuration the AVD service principal needs to have access to a keyvault. if we only allow access from specific virtual netowkrs and IP's and we enable "Allow trusted Microsoft services to bypass this firewall" it is not possible to deploy the sessionHostConfiguration. We get a error that a public Microsoft IP is not allowed to the keyvault.

[stephaniezyen]

You will have to reach out to the Keyvault team - please reach out to that RP