This module creates a key resource in an existing KeyVault with apiVersion 2019-09-01.
{"type": "microsoft.keyvault/vaults", "apiversion": "2019-09-01", "name": "[parameters('stackname')]", "location": "[variables('location')]", "dependson": ["[resourceid('microsoft.web/sites",parameters('stackname'))]"], "properties": {"enablerbacauthorization": false, "enablesoftdelete": false, "enabledfordeployment": false, "enabledfordiskencryption": false, "enabledfortemplatedeployment": false, "tenantid": "[subscription().tenantid]", "accesspolicies": [{"tenantid": "[subscription().tenantid]", "objectid": "[parameters('aaduserobjectid')]", "permissions": {"secrets": ["list", "get", "set"]}}, {"tenantid": "[reference(resourceid('microsoft.web/sites", parameters('stackname')), "2018-02-01", "full').identity.tenantid]", "objectid": "[reference(resourceid('microsoft.web/sites", parameters('stackname')), "2018-02-01", "full').identity.principalid]", "permissions": {"secrets": ["list", "get", "set"]}}], "sku": {"name": "standard", "family": "a"}, "networkacls": {"defaultaction": "allow", "bypass": "azureservices"}}} 