[AVM Module Issue]: Extend Microsoft.DocumentDB/databaseAccounts module to enable managedHSM integration for customer managed keys

[mtonneaupxs]

Check for previous/existing GitHub issues

• I have checked for previous/existing GitHub issues

Issue Type?

Feature Request

Module Name

avm/res/document-db/database-account

(Optional) Module Version

No response

Description

Extend Microsoft.DocumentDB/databaseAccounts module to support customer managed key encryption with Managed HSM since the module currently only support integration with key vault customer managed keys.

(Optional) Correlation Id

No response

[avm-organizer]

@mtonneaupxs, thanks for submitting this issue for the avm/res/document-db/database-account module!

Important

Please note, that this module is currently orphaned. The @Azure/avm-core-team-technical-bicep, will attempt to find an owner for it. In the meantime, the core team may assist with this issue. Thank you for your patience!

[eriqua]

Hey @mtonneaupxs, extending CMK to managedHSM would mean updating the AVM bicep CMK interface, currently only supporting key vaults.

Reference: Azure/Azure-Verified-Modules#2407, this issue aims to define a generalized CMK interface.
Please monitor the progress of that issue. Once the generalized interface is finalized, it should be straightforward to extend it to support resources that allow encryption with Managed HSM keys, like this one