sanitized parameter file

Author: mswantek68

.gitignore

@@ -2,3 +2,15 @@
 .vs
 .venv
 __pycache__
+
+# Azure Developer CLI (azd)
+.azure/
+
+# Local environment files
+.env
+.env.*
+!.env.example
+
+# Local-only Bicep parameter overrides
+infra/*.local.bicepparam
+infra/*.local.bicepparam.json

README.md

@@ -92,7 +92,7 @@ Follow the deployment guide to deploy this solution to your own Azure subscripti
 
 <br/>
 
-> ⚠️ **Important: This repository uses git submodules**
+>  **Important: This repository uses git submodules**
 > <br/>Clone with submodules included:
 > ```bash
 > git clone --recurse-submodules https://github.com/microsoft/Deploy-Your-AI-Application-In-Production.git
@@ -105,7 +105,18 @@ Follow the deployment guide to deploy this solution to your own Azure subscripti
 
 <br/>
 
-> ⚠️ **Important: Check Azure OpenAI Quota Availability**
+>  **Important: Keep environment-specific values local**
+> <br/>This repo reads some settings from your local `azd` environment to avoid committing tenant/subscription-specific values.
+> ```bash
+> # Stored locally under .azure/ (gitignored)
+> azd env set FABRIC_CAPACITY_ADMINS '["[email protected]"]'
+> azd env set AISEARCH_ADDITIONAL_ACCESS_OBJECT_IDS '["<entraObjectId1>","<entraObjectId2>"]'
+> azd env set PURVIEW_ACCOUNT_RESOURCE_ID '/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.Purview/accounts/<name>'
+> ```
+
+<br/>
+
+>  **Important: Check Azure OpenAI Quota Availability**
 > <br/>To ensure sufficient quota is available in your subscription, please follow the [quota check instructions guide](./docs/quota_check.md) before deploying.
 
 <br/>
@@ -137,7 +148,7 @@ Follow the deployment guide to deploy this solution to your own Azure subscripti
   | Microsoft Fabric | F8 Capacity | [Pricing](https://azure.microsoft.com/pricing/details/microsoft-fabric/) |
   | Virtual Network + Bastion | Standard | [Pricing](https://azure.microsoft.com/pricing/details/azure-bastion/) |
 
-  > 💡 **Cost Optimization:** Fabric capacity can be paused when not in use. Use `az fabric capacity suspend` to stop billing.
+  >  **Cost Optimization:** Fabric capacity can be paused when not in use. Use `az fabric capacity suspend` to stop billing.
 
   Use the [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for detailed estimates.
 

infra/main.bicepparam

@@ -77,7 +77,7 @@ param aiSearchDefinition = {
   disableLocalAuth: true
 }
 
-param aiSearchAdditionalAccessObjectIds = ['2e3ad864-1202-48a0-8eeb-e3e66a6fcbae','0d60355b-dcae-4331-b55f-283d80aabde5']
+param aiSearchAdditionalAccessObjectIds = json(readEnvironmentVariable('AISEARCH_ADDITIONAL_ACCESS_OBJECT_IDS', '[]'))
 
 // ========================================
 // FABRIC CAPACITY PARAMETERS
@@ -90,16 +90,14 @@ param deployFabricCapacity = true
 param fabricCapacitySku = 'F8'
 
 // Fabric capacity admin members (email addresses or object IDs).
-param fabricCapacityAdmins = [
-  '[email protected]'
-]
+param fabricCapacityAdmins = json(readEnvironmentVariable('FABRIC_CAPACITY_ADMINS', '[]'))
 
 // ========================================
 // PURVIEW PARAMETERS (Optional)
 // ========================================
 
 // Existing Purview account resource ID (in different subscription if needed).
-param purviewAccountResourceId = '/subscriptions/48ab3756-f962-40a8-b0cf-b33ddae744bb/resourceGroups/Governance/providers/Microsoft.Purview/accounts/swantekPurview'
+param purviewAccountResourceId = readEnvironmentVariable('PURVIEW_ACCOUNT_RESOURCE_ID', '')
 
 // Purview collection name (leave empty to auto-generate from environment name).
 param purviewCollectionName = ''