Skip to content

core(infra): remove hardcoded personal defaults from APIM Bicep module #423

Description

@willvelida

Summary

The 2026-06-03 harness health audit identified one WARN finding in the Architecture Fitness dimension. The apim-consumption.bicep module contains hardcoded personal information as default parameter values (emailAddress and publisherName), which is a security hygiene concern and deviates from the parameterisation conventions used by all other Bicep modules.

Goals

  • Remove personal information from Bicep module default values
  • Ensure APIM module follows the same parameterisation pattern as all other modules

Non-Goals

  • Changing APIM module functionality or deployment behaviour
  • Modifying deployed infrastructure — this is a source-code hygiene fix only

Tasks

  • Replace the default value for emailAddress parameter in infra/modules/apim/apim-consumption.bicep from the current personal email to a generic placeholder (e.g., 'admin@example.com') or remove the default entirely.
  • Replace the default value for publisherName parameter from the current personal name to a generic placeholder (e.g., 'Organization Name') or remove the default entirely.
  • Verify that all infra/apps/ Bicep files that reference this module pass explicit values for both parameters (so removing defaults does not break deployments).

Complexity

CS-1 — Single-file edit with deployment verification.

Affected Services

  • infra/modules/apim/apim-consumption.bicep
  • infra/apps/ (callers — verification only)

Links

  • Audit source: Harness Health Audit 2026-06-03 (Dimension 3: Architecture Fitness)

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions