如何通过https://management.azure.com api进行身份验证？

Question

I want to retrieve data on my DNS zones through a API call:

$api = "?api-version=2018-05-01"

$pat = "Bearer $env:System_AccessToken"

Write-Host "### PAT ###"
Write-Host $pat

$DNSInformation = "https://management.azure.com/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.Network/dnsZones/$zoneName/$recordType/$relativeRecordSetName$api"

Write-Host "###"
Write-Host $DNSInformation
Write-Host "###"

$x = Invoke-RestMethod -Uri $DNSInformation -Headers @{Authorization = $pat } -Method Get

When I run this script I get:

The remote server returned an error: (401) Unauthorized.

When I navigate to the URL I get:

error: {
    code: "AuthenticationFailed",
    message: "Authentication failed. The Authorization header is missing."
}

I think the issue is that I can't use the $env:System_AccessToken token to get on the management api . But I can't find information what kind of authentication is needed.

Answer 1

As the error mentions, the authorization header is incorrect.

$URI = "https://management.azure.com/providers/microsoft.resources/checkresourcename?api-version=2014-01-01"
Invoke-RestMethod -Uri $URI -Method GET -Headers $authHeader

You can use a couple of approaches to create your header:

1. As you mentioned - Azure Powershell to check resource names

2. By creating Bearer token : Powershell Script to delete unused resources in Azure