Certificate creation is failing with unhelpful error, debug logs are not useful either

[wasker]

This is autogenerated. Please review and update as needed.

Describe the bug

Command Name

az keyvault certificate create

Errors:

ActivityId: 05751e9f-c838-47eb-9e0b-39780fe1d695, ActivityName: CertificateCreate

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

• Put any pre-requisite steps here...

• az keyvault certificate create --name cert--xxx --policy @../shared/cert-policies/generated-cert--xxx.json --vault-name kv-xxx --debug

Fails with cli.azure.cli.core.azclierror: ActivityId: 05751e9f-c838-47eb-9e0b-39780fe1d695, ActivityName: CertificateCreate error.

debug-log.txt

Expected Behavior

Certificate is created.

Environment Summary

Windows-10-10.0.19041-SP0
Python 3.8.9
Installer: MSI

azure-cli 2.29.0

Extensions:
aks-preview 0.5.34
azure-devops 0.18.0
front-door 1.0.16
log-analytics 0.2.1
resource-graph 2.1.0

Additional Context

[wasker]

FYI: I tracked down the problem to be a missing issuerParameters.name value in the JSON policy file, however, neither error message, nor debug mode helped me with troubleshooting. In fact, Azure responding with 500 on bad user input (shown in the debug log) makes the whole thing much more confusing than it has to be.

[yonzhan]

keyvault