How can one deploy an ARM template for Cloud Service to a subscription separate from the keyVault?

edit

To deploy an ARM template for Cloud Service to a subscription separate from the keyVault, you can follow these steps:

1. Create a new resource group in the separate subscription where you want to deploy the Cloud Service.
2. Upload the ARM template to a storage account or a public repository like GitHub.
3. Modify the ARM template to reference the keyVault in the original subscription using its fully qualified domain name (FQDN).
4. Create a deployment in the new subscription using the modified ARM template and specify the storage account or GitHub repository where the ARM template is located.
5. When prompted for the keyVault credentials during the deployment, provide the appropriate credentials for the keyVault in the original subscription.

This approach allows you to deploy the Cloud Service to a separate subscription without needing to move the keyVault or duplicate its contents.