az keyvault create gives "Bad JSON content found in the request."

[yooakim]

I'm trying to create a new keyvault using AZ CLI. My command line is as follows:

 az keyvault create -n 'comet-key-vault' -g 'jun-mgmt' --enable-soft-delete true --enabled-for-deployment true --enabled-for-template-deployment true 

the response I get is:

Bad JSON content found in the request.

I am using AZ CLI on Windows, versions as follows:

azure-cli                         2.0.60
keyvault                          2.2.12

I am not able to see what is wrong in the request. Anyone here who can help?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 226e5769-f6c8-a480-db78-727fb96348ec
• Version Independent ID: 8ee06a2a-6eda-11be-3c8e-6ad948be207e
• Content: az keyvault
• Content Source: src/command_modules/azure-cli-keyvault/azure/cli/command_modules/keyvault/_help.py
• Service: key-vault
• GitHub Login: Robert Outlaw (@rloutlaw)
• Microsoft Alias: routlaw

[tjprescott]

If you are running on Windows Command Prompt, you cannot use single quotes. Use double quotes.

[yooakim]

If you are running on Windows Command Prompt, you cannot use single quotes. Use double quotes.
Thanks but I am using PowerShell, so the quotes are ok.

[tjprescott]

Please run your comment with --debug and paste the first line of output. It will look something like this:
Command arguments: ['group', 'show', '--debug']

[stephanmax]

I am having the same issue (aks-engine Version: v0.34.1, GitCommit: e68d84850):

$ az keyvault create -g test-stephan -n env-stephan-kv --debug

Command arguments: ['keyvault', 'create', '-g', 'test-stephan', '-n', 'env-stephan-kv', '--debug']
Event: Cli.PreExecute []
Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x106ab4268>, <function OutputProducer.on_global_arguments at 0x106b4b0d0>, <function CLIQuery.on_global_arguments at 0x106b5b6a8>]
Event: CommandInvoker.OnPreCommandTableCreate []
Installed command modules ['acr', 'acs', 'advisor', 'ams', 'appservice', 'backup', 'batch', 'batchai', 'billing', 'botservice', 'cdn', 'cloud', 'cognitiveservices', 'configure', 'consumption', 'container', 'cosmosdb', 'deploymentmanager', 'dla', 'dls', 'dms', 'eventgrid', 'eventhubs', 'extension', 'feedback', 'find', 'hdinsight', 'interactive', 'iot', 'iotcentral', 'keyvault', 'kusto', 'lab', 'maps', 'monitor', 'network', 'policyinsights', 'privatedns', 'profile', 'rdbms', 'redis', 'relay', 'reservations', 'resource', 'role', 'search', 'security', 'servicebus', 'servicefabric', 'signalr', 'sql', 'sqlvm', 'storage', 'vm']
Loaded module 'acr' in 0.006 seconds.
Loaded module 'acs' in 0.004 seconds.
Loaded module 'advisor' in 0.002 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'ams' in 0.006 seconds.
Loaded module 'appservice' in 0.018 seconds.
Loaded module 'backup' in 0.004 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'batch' in 0.010 seconds.
Loaded module 'batchai' in 0.006 seconds.
Loaded module 'billing' in 0.003 seconds.
Loaded module 'botservice' in 0.004 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'cdn' in 0.003 seconds.
Loaded module 'cloud' in 0.002 seconds.
Loaded module 'cognitiveservices' in 0.002 seconds.
Loaded module 'configure' in 0.002 seconds.
Loaded module 'consumption' in 0.004 seconds.
Loaded module 'container' in 0.003 seconds.
Loaded module 'cosmosdb' in 0.005 seconds.
Loaded module 'deploymentmanager' in 0.004 seconds.
Loaded module 'dla' in 0.007 seconds.
Loaded module 'dls' in 0.004 seconds.
Loaded module 'dms' in 0.003 seconds.
Loaded module 'eventgrid' in 0.003 seconds.
Loaded module 'eventhubs' in 0.004 seconds.
Loaded module 'extension' in 0.001 seconds.
Loaded module 'feedback' in 0.001 seconds.
Loaded module 'find' in 0.001 seconds.
Loaded module 'hdinsight' in 0.003 seconds.
Loaded module 'interactive' in 0.001 seconds.
Loaded module 'iot' in 0.004 seconds.
Loaded module 'iotcentral' in 0.002 seconds.
Loaded module 'keyvault' in 0.007 seconds.
Loaded module 'kusto' in 0.003 seconds.
Loaded module 'lab' in 0.004 seconds.
Loaded module 'maps' in 0.002 seconds.
Loaded module 'monitor' in 0.006 seconds.
Loaded module 'network' in 0.026 seconds.
Loaded module 'policyinsights' in 0.003 seconds.
Loaded module 'privatedns' in 0.005 seconds.
Loaded module 'profile' in 0.002 seconds.
Loaded module 'rdbms' in 0.005 seconds.
Loaded module 'redis' in 0.003 seconds.
Loaded module 'relay' in 0.003 seconds.
Loaded module 'reservations' in 0.002 seconds.
Loaded module 'resource' in 0.007 seconds.
Loaded module 'role' in 0.005 seconds.
Loaded module 'search' in 0.003 seconds.
Loaded module 'security' in 0.003 seconds.
Loaded module 'servicebus' in 0.004 seconds.
Loaded module 'servicefabric' in 0.002 seconds.
Loaded module 'signalr' in 0.002 seconds.
Loaded module 'sql' in 0.007 seconds.
Loaded module 'sqlvm' in 0.005 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'storage' in 0.031 seconds.
Loaded module 'vm' in 0.015 seconds.
Loaded all modules in 0.279 seconds. (note: there's always an overhead with the first module loaded)
Extensions directory: '/Users/smax/.azure/cliextensions'
Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x106be82f0>]
az_command_data_logger : command args: keyvault create -g {} -n {} --debug
metadata file logging enabled - writing logs to '/Users/smax/.azure/commands'.
msrestazure.azure_active_directory : Cannot load 'keyring' on your system (either not installed, or not configured correctly): No module named 'entrypoints'
Configured default 'northeurope' for arg location
Event: CommandInvoker.OnPostCommandTableCreate [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x106c0b268>, <function register_ids_argument.<locals>.add_ids_arguments at 0x106c3aae8>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x106c3ac80>]
Event: CommandInvoker.OnCommandTableLoaded []
Event: CommandInvoker.OnPreParseArgs [<function _documentdb_deprecate at 0x107acbbf8>]
Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x106b4b158>, <function CLIQuery.handle_query_parameter at 0x106b5b730>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x106c3ab70>, <function handler at 0x107bd4840>]
Getting management service client client_type=KeyVaultManagementClient
msrest.universal_http.requests : Configuring retry: max_retries=4, backoff_factor=0.8, max_backoff=90
msrest.universal_http.requests : Configuring retry: max_retries=4, backoff_factor=0.8, max_backoff=90
attempting to read file /Users/smax/.azure/accessTokens.json as utf-8-sig
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - Authority:Performing instance discovery: ...
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - Authority:Performing static instance discovery
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - Authority:Authority validated via static instance discovery
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - TokenRequest:Getting token from cache with refresh if necessary.
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - CacheDriver:finding with query keys: {'_clientId': '...', 'userId': '...'}
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - CacheDriver:Looking for potential cache entries: {'_clientId': '...', 'userId': '...'}
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - CacheDriver:Found 2 potential entries.
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - CacheDriver:Resource specific token found.
adal-python : a70cf8b5-227b-46c8-affb-c96eda5dc905 - CacheDriver:Returning token from cache lookup, AccessTokenId: b'cRYMkLXyqG196VKXzLzKMzxx92cL/NyQVUl05AAkob0=', RefreshTokenId: b'ZnhARpThbIjGhl/m001gPLGRlc1sSO+CcMLHlGoqlzw='
msrest.universal_http : Configuring redirects: allow=True, max=30
msrest.universal_http : Configuring request: timeout=100, verify=True, cert=None
msrest.universal_http : Configuring proxies: ''
msrest.universal_http : Evaluate proxies against ENV settings: True
urllib3.connectionpool : Starting new HTTPS connection (1): graph.windows.net:443
urllib3.connectionpool : https://graph.windows.net:443 "GET /<tenantId_removed>/me?api-version=1.6 HTTP/1.1" 200 1683
msrest.service_client : Accept header absent and forced to application/json
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - Authority:Performing instance discovery: ...
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - Authority:Performing static instance discovery
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - Authority:Authority validated via static instance discovery
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - TokenRequest:Getting token from cache with refresh if necessary.
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - CacheDriver:finding with query keys: {'_clientId': '...', 'userId': '...'}
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - CacheDriver:Looking for potential cache entries: {'_clientId': '...', 'userId': '...'}
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - CacheDriver:Found 2 potential entries.
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - CacheDriver:Resource specific token found.
adal-python : 3f509253-5a2a-4c89-b434-5a12ecb05419 - CacheDriver:Returning token from cache lookup, AccessTokenId: b'GPkNzoTqQ+J8hpERnokFouFdEnBi6NUaElYtK+COPvM=', RefreshTokenId: b'ZnhARpThbIjGhl/m001gPLGRlc1sSO+CcMLHlGoqlzw='
msrest.http_logger : Request URL: 'https://management.azure.com/subscriptions/<removed>/resourceGroups/test-stephan/providers/Microsoft.KeyVault/vaults/env-stephan-kv?api-version=2018-02-14'
msrest.http_logger : Request method: 'PUT'
msrest.http_logger : Request headers:
msrest.http_logger :     'Accept': 'application/json'
msrest.http_logger :     'Content-Type': 'application/json; charset=utf-8'
msrest.http_logger :     'accept-language': 'en-US'
msrest.http_logger :     'Content-Length': '737'
msrest.http_logger :     'User-Agent': 'python/3.7.3 (Darwin-18.2.0-x86_64-i386-64bit) msrest/0.6.6 msrest_azure/0.4.34 azure-mgmt-keyvault/1.1.0 Azure-SDK-For-Python AZURECLI/2.0.63'
msrest.http_logger : Request body:
msrest.http_logger : {"location": "northeurope", "properties": {"tenantId": "<removed>", "sku": {"family": "A", "name": "standard"}, "accessPolicies": [{"tenantId": "<removed>", "objectId": "ca470180-1a6f-4ff3-8012-14a566ebb1b0", "permissions": {"keys": ["get", "create", "delete", "list", "update", "import", "backup", "restore", "recover"], "secrets": ["get", "list", "set", "delete", "backup", "restore", "recover"], "certificates": ["get", "list", "delete", "create", "import", "update", "managecontacts", "getissuers", "listissuers", "setissuers", "deleteissuers", "manageissuers", "recover"], "storage": ["get", "list", "delete", "set", "update", "regeneratekey", "setsas", "listsas", "getsas", "deletesas"]}}]}}
msrest.universal_http : Configuring redirects: allow=True, max=30
msrest.universal_http : Configuring request: timeout=100, verify=True, cert=None
msrest.universal_http : Configuring proxies: ''
msrest.universal_http : Evaluate proxies against ENV settings: True
urllib3.connectionpool : Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool : https://management.azure.com:443 "PUT /subscriptions/<removed>/resourceGroups/test-stephan/providers/Microsoft.KeyVault/vaults/env-stephan?api-version=2018-02-14 HTTP/1.1" 400 82
msrest.http_logger : Response status: 400
msrest.http_logger : Response headers:
msrest.http_logger :     'Cache-Control': 'no-cache'
msrest.http_logger :     'Pragma': 'no-cache'
msrest.http_logger :     'Content-Length': '82'
msrest.http_logger :     'Content-Type': 'application/json; charset=utf-8'
msrest.http_logger :     'Expires': '-1'
msrest.http_logger :     'x-ms-keyvault-service-version': '1.1.0.244'
msrest.http_logger :     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
msrest.http_logger :     'X-Content-Type-Options': 'nosniff'
msrest.http_logger :     'Server': 'Microsoft-IIS/10.0'
msrest.http_logger :     'X-AspNet-Version': '4.0.30319'
msrest.http_logger :     'X-Powered-By': 'ASP.NET'
msrest.http_logger :     'x-ms-ratelimit-remaining-subscription-writes': '1199'
msrest.http_logger :     'x-ms-request-id': '7a190aa7-6ad5-4759-92dd-6a4de7345397'
msrest.http_logger :     'x-ms-correlation-request-id': '7a190aa7-6ad5-4759-92dd-6a4de7345397'
msrest.http_logger :     'x-ms-routing-request-id': 'FRANCESOUTH:20190506T110805Z:7a190aa7-6ad5-4759-92dd-6a4de7345397'
msrest.http_logger :     'Date': 'Mon, 06 May 2019 11:08:05 GMT'
msrest.http_logger : Response content:
msrest.http_logger : {"error":{"code":"BadRequest","message":"Bad JSON content found in the request."}}
msrest.exceptions : Bad JSON content found in the request.

Do you have any ideas, Travis Prescott (@tjprescott)? Much appreciated!

[tjprescott]

I compared the two request payloads and they were identical (my call succeeded). Can you provide the output of az cloud show?

[stephanmax]

Hey Travis, thanks for looking into this.

{
  "endpoints": {
    "activeDirectory": "https://login.microsoftonline.com",
    "activeDirectoryDataLakeResourceId": "https://datalake.azure.net/",
    "activeDirectoryGraphResourceId": "https://graph.windows.net/",
    "activeDirectoryResourceId": "https://management.core.windows.net/",
    "batchResourceId": "https://batch.core.windows.net/",
    "gallery": "https://gallery.azure.com/",
    "management": "https://management.core.windows.net/",
    "mediaResourceId": "https://rest.media.azure.net",
    "resourceManager": "https://management.azure.com/",
    "sqlManagement": "https://management.core.windows.net:8443/",
    "vmImageAliasDoc": "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/master/arm-compute/quickstart-templates/aliases.json"
  },
  "isActive": true,
  "name": "AzureCloud",
  "profile": "latest",
  "suffixes": {
    "acrLoginServerEndpoint": ".azurecr.io",
    "azureDatalakeAnalyticsCatalogAndJobEndpoint": "azuredatalakeanalytics.net",
    "azureDatalakeStoreFileSystemEndpoint": "azuredatalakestore.net",
    "keyvaultDns": ".vault.azure.net",
    "sqlServerHostname": ".database.windows.net",
    "storageEndpoint": "core.windows.net"
  }
}

[tjprescott]

I'm not sure for this one. Since the request payloads matched, I would recommend you open a support ticket on the portal to engage with the service team. I will flag this as a service attention item in the meantime.