schemaId: builtin:hyperscaler-authentication.connections.azure
scope: environment
value:
  # Connection Name (e.g., Subscription Name)
  name: my-client-secret-connection
  
  # Type: 'federatedIdentityCredential' or 'clientSecret'
  type: clientSecret
  
  clientSecret:
    # Azure Entra Tenant ID
    # Retrieve: az account show --query tenantId -o tsv
    directoryId: "00000000-0000-0000-0000-000000000000"
    
    # Azure Entra Service Principal Application ID
    # Create New: az ad sp create-for-rbac --name "my-sp"
    # Find Existing: az ad sp list --display-name "my-sp" --query "[].appId" -o tsv
    applicationId: "00000000-0000-0000-0000-000000000000"
    
    # Client Secret (Service Principal Secret)
    clientSecret: "ENTER_YOUR_CLIENT_SECRET"

    # Consumer — which Dynatrace integration may use this connection.
    #
    # IMPORTANT: the schema enforces maxObjects=1 — exactly ONE consumer per
    # connection. To wire the same Azure SP into multiple consumers, create one
    # connection per consumer (they can share the same directoryId/applicationId).
    #
    # Allowed values for clientSecret (schema enum ConsumersOfClientSecret) —
    # uncomment exactly one:
    consumers:
      - SVC:com.dynatrace.da   # Data Acquisition (default)
