We recommend using Azure Native.
Azure v6.28.0 published on Friday, Oct 3, 2025 by Pulumi
azure.appconfiguration.getConfigurationStore
Use this data source to access information about an existing App Configuration.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = azure.appconfiguration.getConfigurationStore({
    name: "existing",
    resourceGroupName: "existing",
});
export const id = example.then(example => example.id);
import pulumi
import pulumi_azure as azure
example = azure.appconfiguration.get_configuration_store(name="existing",
    resource_group_name="existing")
pulumi.export("id", example.id)
package main
import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/appconfiguration"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := appconfiguration.LookupConfigurationStore(ctx, &appconfiguration.LookupConfigurationStoreArgs{
			Name:              "existing",
			ResourceGroupName: "existing",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("id", example.Id)
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() => 
{
    var example = Azure.AppConfiguration.GetConfigurationStore.Invoke(new()
    {
        Name = "existing",
        ResourceGroupName = "existing",
    });
    return new Dictionary<string, object?>
    {
        ["id"] = example.Apply(getConfigurationStoreResult => getConfigurationStoreResult.Id),
    };
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.appconfiguration.AppconfigurationFunctions;
import com.pulumi.azure.appconfiguration.inputs.GetConfigurationStoreArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = AppconfigurationFunctions.getConfigurationStore(GetConfigurationStoreArgs.builder()
            .name("existing")
            .resourceGroupName("existing")
            .build());
        ctx.export("id", example.id());
    }
}
variables:
  example:
    fn::invoke:
      function: azure:appconfiguration:getConfigurationStore
      arguments:
        name: existing
        resourceGroupName: existing
outputs:
  id: ${example.id}
API Providers
This data source uses the following Azure API Providers:
- Microsoft.AppConfiguration- 2024-05-01
Using getConfigurationStore
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getConfigurationStore(args: GetConfigurationStoreArgs, opts?: InvokeOptions): Promise<GetConfigurationStoreResult>
function getConfigurationStoreOutput(args: GetConfigurationStoreOutputArgs, opts?: InvokeOptions): Output<GetConfigurationStoreResult>def get_configuration_store(name: Optional[str] = None,
                            resource_group_name: Optional[str] = None,
                            opts: Optional[InvokeOptions] = None) -> GetConfigurationStoreResult
def get_configuration_store_output(name: Optional[pulumi.Input[str]] = None,
                            resource_group_name: Optional[pulumi.Input[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[GetConfigurationStoreResult]func LookupConfigurationStore(ctx *Context, args *LookupConfigurationStoreArgs, opts ...InvokeOption) (*LookupConfigurationStoreResult, error)
func LookupConfigurationStoreOutput(ctx *Context, args *LookupConfigurationStoreOutputArgs, opts ...InvokeOption) LookupConfigurationStoreResultOutput> Note: This function is named LookupConfigurationStore in the Go SDK.
public static class GetConfigurationStore 
{
    public static Task<GetConfigurationStoreResult> InvokeAsync(GetConfigurationStoreArgs args, InvokeOptions? opts = null)
    public static Output<GetConfigurationStoreResult> Invoke(GetConfigurationStoreInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetConfigurationStoreResult> getConfigurationStore(GetConfigurationStoreArgs args, InvokeOptions options)
public static Output<GetConfigurationStoreResult> getConfigurationStore(GetConfigurationStoreArgs args, InvokeOptions options)
fn::invoke:
  function: azure:appconfiguration/getConfigurationStore:getConfigurationStore
  arguments:
    # arguments dictionaryThe following arguments are supported:
- Name string
- The Name of this App Configuration.
- ResourceGroup stringName 
- The name of the Resource Group where the App Configuration exists.
- Name string
- The Name of this App Configuration.
- ResourceGroup stringName 
- The name of the Resource Group where the App Configuration exists.
- name String
- The Name of this App Configuration.
- resourceGroup StringName 
- The name of the Resource Group where the App Configuration exists.
- name string
- The Name of this App Configuration.
- resourceGroup stringName 
- The name of the Resource Group where the App Configuration exists.
- name str
- The Name of this App Configuration.
- resource_group_ strname 
- The name of the Resource Group where the App Configuration exists.
- name String
- The Name of this App Configuration.
- resourceGroup StringName 
- The name of the Resource Group where the App Configuration exists.
getConfigurationStore Result
The following output properties are available:
- DataPlane stringProxy Authentication Mode 
- The data plane proxy authentication mode.
- DataPlane boolProxy Private Link Delegation Enabled 
- Whether data plane proxy private link delegation is enabled.
- Encryptions
List<GetConfiguration Store Encryption> 
- An encryptionblock as defined below.
- Endpoint string
- The URL of the App Configuration Replica.
- Id string
- The provider-assigned unique ID for this managed resource.
- Identities
List<GetConfiguration Store Identity> 
- An identityblock as defined below.
- LocalAuth boolEnabled 
- Whether local authentication methods are enabled.
- Location string
- The supported Azure location where the App Configuration Replica exists.
- Name string
- The name of the App Configuration Replica.
- PrimaryRead List<GetKeys Configuration Store Primary Read Key> 
- A primary_read_keyblock as defined below containing the primary read access key.
- PrimaryWrite List<GetKeys Configuration Store Primary Write Key> 
- A primary_write_keyblock as defined below containing the primary write access key.
- PublicNetwork stringAccess 
- The Public Network Access setting of this App Configuration.
- PublicNetwork boolAccess Enabled 
- PurgeProtection boolEnabled 
- Whether Purge Protection is enabled.
- Replicas
List<GetConfiguration Store Replica> 
- One or more replicablocks as defined below.
- ResourceGroup stringName 
- SecondaryRead List<GetKeys Configuration Store Secondary Read Key> 
- A secondary_read_keyblock as defined below containing the secondary read access key.
- SecondaryWrite List<GetKeys Configuration Store Secondary Write Key> 
- A secondary_write_keyblock as defined below containing the secondary write access key.
- Sku string
- The name of the SKU used for this App Configuration.
- SoftDelete intRetention Days 
- The number of days that items should be retained for once soft-deleted.
- Dictionary<string, string>
- A mapping of tags assigned to the App Configuration.
- DataPlane stringProxy Authentication Mode 
- The data plane proxy authentication mode.
- DataPlane boolProxy Private Link Delegation Enabled 
- Whether data plane proxy private link delegation is enabled.
- Encryptions
[]GetConfiguration Store Encryption 
- An encryptionblock as defined below.
- Endpoint string
- The URL of the App Configuration Replica.
- Id string
- The provider-assigned unique ID for this managed resource.
- Identities
[]GetConfiguration Store Identity 
- An identityblock as defined below.
- LocalAuth boolEnabled 
- Whether local authentication methods are enabled.
- Location string
- The supported Azure location where the App Configuration Replica exists.
- Name string
- The name of the App Configuration Replica.
- PrimaryRead []GetKeys Configuration Store Primary Read Key 
- A primary_read_keyblock as defined below containing the primary read access key.
- PrimaryWrite []GetKeys Configuration Store Primary Write Key 
- A primary_write_keyblock as defined below containing the primary write access key.
- PublicNetwork stringAccess 
- The Public Network Access setting of this App Configuration.
- PublicNetwork boolAccess Enabled 
- PurgeProtection boolEnabled 
- Whether Purge Protection is enabled.
- Replicas
[]GetConfiguration Store Replica 
- One or more replicablocks as defined below.
- ResourceGroup stringName 
- SecondaryRead []GetKeys Configuration Store Secondary Read Key 
- A secondary_read_keyblock as defined below containing the secondary read access key.
- SecondaryWrite []GetKeys Configuration Store Secondary Write Key 
- A secondary_write_keyblock as defined below containing the secondary write access key.
- Sku string
- The name of the SKU used for this App Configuration.
- SoftDelete intRetention Days 
- The number of days that items should be retained for once soft-deleted.
- map[string]string
- A mapping of tags assigned to the App Configuration.
- dataPlane StringProxy Authentication Mode 
- The data plane proxy authentication mode.
- dataPlane BooleanProxy Private Link Delegation Enabled 
- Whether data plane proxy private link delegation is enabled.
- encryptions
List<GetConfiguration Store Encryption> 
- An encryptionblock as defined below.
- endpoint String
- The URL of the App Configuration Replica.
- id String
- The provider-assigned unique ID for this managed resource.
- identities
List<GetConfiguration Store Identity> 
- An identityblock as defined below.
- localAuth BooleanEnabled 
- Whether local authentication methods are enabled.
- location String
- The supported Azure location where the App Configuration Replica exists.
- name String
- The name of the App Configuration Replica.
- primaryRead List<GetKeys Configuration Store Primary Read Key> 
- A primary_read_keyblock as defined below containing the primary read access key.
- primaryWrite List<GetKeys Configuration Store Primary Write Key> 
- A primary_write_keyblock as defined below containing the primary write access key.
- publicNetwork StringAccess 
- The Public Network Access setting of this App Configuration.
- publicNetwork BooleanAccess Enabled 
- purgeProtection BooleanEnabled 
- Whether Purge Protection is enabled.
- replicas
List<GetConfiguration Store Replica> 
- One or more replicablocks as defined below.
- resourceGroup StringName 
- secondaryRead List<GetKeys Configuration Store Secondary Read Key> 
- A secondary_read_keyblock as defined below containing the secondary read access key.
- secondaryWrite List<GetKeys Configuration Store Secondary Write Key> 
- A secondary_write_keyblock as defined below containing the secondary write access key.
- sku String
- The name of the SKU used for this App Configuration.
- softDelete IntegerRetention Days 
- The number of days that items should be retained for once soft-deleted.
- Map<String,String>
- A mapping of tags assigned to the App Configuration.
- dataPlane stringProxy Authentication Mode 
- The data plane proxy authentication mode.
- dataPlane booleanProxy Private Link Delegation Enabled 
- Whether data plane proxy private link delegation is enabled.
- encryptions
GetConfiguration Store Encryption[] 
- An encryptionblock as defined below.
- endpoint string
- The URL of the App Configuration Replica.
- id string
- The provider-assigned unique ID for this managed resource.
- identities
GetConfiguration Store Identity[] 
- An identityblock as defined below.
- localAuth booleanEnabled 
- Whether local authentication methods are enabled.
- location string
- The supported Azure location where the App Configuration Replica exists.
- name string
- The name of the App Configuration Replica.
- primaryRead GetKeys Configuration Store Primary Read Key[] 
- A primary_read_keyblock as defined below containing the primary read access key.
- primaryWrite GetKeys Configuration Store Primary Write Key[] 
- A primary_write_keyblock as defined below containing the primary write access key.
- publicNetwork stringAccess 
- The Public Network Access setting of this App Configuration.
- publicNetwork booleanAccess Enabled 
- purgeProtection booleanEnabled 
- Whether Purge Protection is enabled.
- replicas
GetConfiguration Store Replica[] 
- One or more replicablocks as defined below.
- resourceGroup stringName 
- secondaryRead GetKeys Configuration Store Secondary Read Key[] 
- A secondary_read_keyblock as defined below containing the secondary read access key.
- secondaryWrite GetKeys Configuration Store Secondary Write Key[] 
- A secondary_write_keyblock as defined below containing the secondary write access key.
- sku string
- The name of the SKU used for this App Configuration.
- softDelete numberRetention Days 
- The number of days that items should be retained for once soft-deleted.
- {[key: string]: string}
- A mapping of tags assigned to the App Configuration.
- data_plane_ strproxy_ authentication_ mode 
- The data plane proxy authentication mode.
- data_plane_ boolproxy_ private_ link_ delegation_ enabled 
- Whether data plane proxy private link delegation is enabled.
- encryptions
Sequence[GetConfiguration Store Encryption] 
- An encryptionblock as defined below.
- endpoint str
- The URL of the App Configuration Replica.
- id str
- The provider-assigned unique ID for this managed resource.
- identities
Sequence[GetConfiguration Store Identity] 
- An identityblock as defined below.
- local_auth_ boolenabled 
- Whether local authentication methods are enabled.
- location str
- The supported Azure location where the App Configuration Replica exists.
- name str
- The name of the App Configuration Replica.
- primary_read_ Sequence[Getkeys Configuration Store Primary Read Key] 
- A primary_read_keyblock as defined below containing the primary read access key.
- primary_write_ Sequence[Getkeys Configuration Store Primary Write Key] 
- A primary_write_keyblock as defined below containing the primary write access key.
- public_network_ straccess 
- The Public Network Access setting of this App Configuration.
- public_network_ boolaccess_ enabled 
- purge_protection_ boolenabled 
- Whether Purge Protection is enabled.
- replicas
Sequence[GetConfiguration Store Replica] 
- One or more replicablocks as defined below.
- resource_group_ strname 
- secondary_read_ Sequence[Getkeys Configuration Store Secondary Read Key] 
- A secondary_read_keyblock as defined below containing the secondary read access key.
- secondary_write_ Sequence[Getkeys Configuration Store Secondary Write Key] 
- A secondary_write_keyblock as defined below containing the secondary write access key.
- sku str
- The name of the SKU used for this App Configuration.
- soft_delete_ intretention_ days 
- The number of days that items should be retained for once soft-deleted.
- Mapping[str, str]
- A mapping of tags assigned to the App Configuration.
- dataPlane StringProxy Authentication Mode 
- The data plane proxy authentication mode.
- dataPlane BooleanProxy Private Link Delegation Enabled 
- Whether data plane proxy private link delegation is enabled.
- encryptions List<Property Map>
- An encryptionblock as defined below.
- endpoint String
- The URL of the App Configuration Replica.
- id String
- The provider-assigned unique ID for this managed resource.
- identities List<Property Map>
- An identityblock as defined below.
- localAuth BooleanEnabled 
- Whether local authentication methods are enabled.
- location String
- The supported Azure location where the App Configuration Replica exists.
- name String
- The name of the App Configuration Replica.
- primaryRead List<Property Map>Keys 
- A primary_read_keyblock as defined below containing the primary read access key.
- primaryWrite List<Property Map>Keys 
- A primary_write_keyblock as defined below containing the primary write access key.
- publicNetwork StringAccess 
- The Public Network Access setting of this App Configuration.
- publicNetwork BooleanAccess Enabled 
- purgeProtection BooleanEnabled 
- Whether Purge Protection is enabled.
- replicas List<Property Map>
- One or more replicablocks as defined below.
- resourceGroup StringName 
- secondaryRead List<Property Map>Keys 
- A secondary_read_keyblock as defined below containing the secondary read access key.
- secondaryWrite List<Property Map>Keys 
- A secondary_write_keyblock as defined below containing the secondary write access key.
- sku String
- The name of the SKU used for this App Configuration.
- softDelete NumberRetention Days 
- The number of days that items should be retained for once soft-deleted.
- Map<String>
- A mapping of tags assigned to the App Configuration.
Supporting Types
GetConfigurationStoreEncryption   
- IdentityClient stringId 
- KeyVault stringKey Identifier 
- IdentityClient stringId 
- KeyVault stringKey Identifier 
- identityClient StringId 
- keyVault StringKey Identifier 
- identityClient stringId 
- keyVault stringKey Identifier 
- identityClient StringId 
- keyVault StringKey Identifier 
GetConfigurationStoreIdentity   
- IdentityIds List<string>
- PrincipalId string
- TenantId string
- Type string
- IdentityIds []string
- PrincipalId string
- TenantId string
- Type string
- identityIds List<String>
- principalId String
- tenantId String
- type String
- identityIds string[]
- principalId string
- tenantId string
- type string
- identity_ids Sequence[str]
- principal_id str
- tenant_id str
- type str
- identityIds List<String>
- principalId String
- tenantId String
- type String
GetConfigurationStorePrimaryReadKey     
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
- connectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id string
- The ID of the Access Key.
- secret string
- The Secret of the Access Key.
- connection_string str
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id str
- The ID of the Access Key.
- secret str
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
GetConfigurationStorePrimaryWriteKey     
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
- connectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id string
- The ID of the Access Key.
- secret string
- The Secret of the Access Key.
- connection_string str
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id str
- The ID of the Access Key.
- secret str
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
GetConfigurationStoreReplica   
GetConfigurationStoreSecondaryReadKey     
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
- connectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id string
- The ID of the Access Key.
- secret string
- The Secret of the Access Key.
- connection_string str
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id str
- The ID of the Access Key.
- secret str
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
GetConfigurationStoreSecondaryWriteKey     
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- ConnectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- Id string
- The ID of the Access Key.
- Secret string
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
- connectionString string
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id string
- The ID of the Access Key.
- secret string
- The Secret of the Access Key.
- connection_string str
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id str
- The ID of the Access Key.
- secret str
- The Secret of the Access Key.
- connectionString String
- The Connection String for this Access Key - consisting of the Endpoint, ID and Secret.
- id String
- The ID of the Access Key.
- secret String
- The Secret of the Access Key.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the azurermTerraform Provider.
