To deploy an ARM template for Cloud Service to a subscription separate from the keyVault, you can follow these steps:
- Create a new resource group in the separate subscription where you want to deploy the Cloud Service.
- Upload the ARM template to a storage account or a public repository like GitHub.
- Modify the ARM template to reference the keyVault in the original subscription using its fully qualified domain name (FQDN).
- Create a deployment in the new subscription using the modified ARM template and specify the storage account or GitHub repository where the ARM template is located.
- When prompted for the keyVault credentials during the deployment, provide the appropriate credentials for the keyVault in the original subscription.
This approach allows you to deploy the Cloud Service to a separate subscription without needing to move the keyVault or duplicate its contents.