Example of create new apim backend with header value that points at named value

[RobBowman]

I have a named value that contains a link to a key vault secret containing a function key.

I'd like to create an apim backend with an authorization credential with a "x-funcions-key" header that pulls it's value from the key vault secret via the named value.

In the portal, it would look like this:

I have tried the following code:

  $headers = @{}
  $headers.add("x-functions-key", @($keyVaultNamedValue.Value))
  $credential = New-AzApiManagementBackendCredential -Header $headers 
  $funcApp = Get-AzResource -Name "func-365response-$env-001"
  $backend = New-AzApiManagementBackend -Context $context -BackendId "func-365response" `
    -ResourceId $funcApp.ResourceId -Credential $credential `
    -Protocol http -url "https://func-365response-$env-001.azurewebsites.net/api"

The New-AzApiManagementBackend command is throwing a null object reference exception.

Can anyone see what I have wrong or know of example code please?

[RobBowman]

After exporting the apim instance to an arm template via the portal, I was better able to understand the data the PowerShell was expecting. The following code works ok:

$backend = Get-AzApiManagementBackend -Context $context -BackendId "func-365response"
if (-not($backend)) {
  $headers = @{}
  $headers.add("x-functions-key", @($nvFuncKey.Name))
  $credential = New-AzApiManagementBackendCredential -Header $headers 
  $funcApp = Get-AzResource -Name "func-365response-$env-001"
  $backend = New-AzApiManagementBackend -Context $context -BackendId "func-365response" `
    -ResourceId "https://management.azure.com/$funcApp.ResourceId" -Credential $credential `
    -Protocol http -url "https://func-365response-$env-001.azurewebsites.net/api"
}