REST APIからAzure OpenAIのネットワークACLを操作する

# サービスプリンシパル名（任意のサービスプリンシパル名に変更）
SP_NAME=gas_response_app

# サービスプリンシパルを作成 
az ad sp create-for-rbac \
 --name ${SP_NAME}

{
  "appId": "<YOUR_APPID>",
  "displayName": "gas_response_app",
  "password": "<YOUR_CLIENT_SECRET>",
  "tenant": "<YOUR_TENANT_ID>"
}

# Cognitive Services 共同作成者ロールを設定
az role assignment create \
 --assignee $(appId) \
 --role "25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68" \
 --scope "/subscriptions/$(subscriptionId)/resourceGroups/$(subscriptionId)"

function getAzureAccessToken(tenantId, clientId, clientSecret) {
  const tokenUrl = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`;
  const params = {
    method: "post",
    payload: {
      client_id: clientId,
      scope: `https://management.azure.com/.default`,
      client_secret: clientSecret,
      grant_type: "client_credentials",
    },
  };

  try {
    const response = UrlFetchApp.fetch(tokenUrl, params);
    const token = JSON.parse(response.getContentText());
    return token.access_token;
  } catch (e) {
    Logger.log("Error: " + e.message);
  }
}

function createRequestOptions(accessToken, subscriptionId, resourceGroupName, accountName, ipRange) {
  const url = `https://management.azure.com/subscriptions/${subscriptionId}/resourceGroups/${resourceGroupName}/providers/Microsoft.CognitiveServices/accounts/${accountName}?api-version=2021-04-30`;
  const headers = {
    Authorization: "Bearer " + accessToken,
    "Content-Type": "application/json",
  };

  const payload = {
    properties: {
      networkAcls: {
        defaultAction: "Deny",
        ipRules: ipRange,
      },
    },
  };
  const options = {
    method: "PATCH",
    headers: headers,
    payload: JSON.stringify(payload),
    muteHttpExceptions: true,
  };

  return {
    url: url,
    options: options,
  };
}

function updateAzureOpenAiIpRange(tenantId, clientId, clientSecret, paramsArray, ipRange) {
  const accessToken = getAzureAccessToken(tenantId, clientId, clientSecret);

  const requests = paramsArray.map(function (account) {
    const subscriptionId = account.subscriptionId;
    const resourceGroupName = account.resourceGroupName;
    const accountName = account.accountName;

    const requestOptions = createRequestOptions(accessToken, subscriptionId, resourceGroupName, accountName, ipRange);
    return requestOptions;
  });

  const fetchRequests = requests.map(function (request) {
    return {
      url: request.url,
      method: request.options.method,
      headers: request.options.headers,
      payload: request.options.payload,
      muteHttpExceptions: request.options.muteHttpExceptions,
    };
  });

  const responses = UrlFetchApp.fetchAll(fetchRequests);
  return responses;
}