---

This section details on the original issue you should resolve

<issue_title>Bug in Environment config loader for new v20250801preview API</issue_title>
<issue_description>### Steps to reproduce

1. Create an environment using Radius.Core/environments@2025-08-01-preview:

   {
     "properties": {
       "providers": {
         "azure": {
           "subscriptionId": "85716382-aaaa-aaaa-aaaa-2126e459a123",
           "resourceGroupName": "my-resource-group"
         }
       }
     }
   }

2. Deploy a resource that uses a recipe (e.g., Radius.Compute/containers)

3. Observe the error during recipe execution

Observed behavior

When using Radius.Core/environments@2025-08-01-preview with the new Azure provider configuration (separate subscriptionId and resourceGroupName fields), recipe deployment fails with:

failed to parse Azure scope: "85716382-aaaa-aaaa-aaaa-2126e459a123" while building the recipe context parameter '85716382-aaaa-aaaa-aaaa-2126e459a123' is not a valid resource id

Desired behavior

The scope should be constructed as a full Azure resource ID path:

/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}

Workaround

Including some investigation notes:

Root Cause

In pkg/recipes/configloader/environment.go#L148-L175, the getConfigurationV20250801() function incorrectly sets only the SubscriptionId as the Scope:

if envDatamodel.Properties.Providers.Azure != nil {
    config.Providers.Azure = datamodel.ProvidersAzure{
        Scope: envDatamodel.Properties.Providers.Azure.SubscriptionId,  // ❌ Only subscription ID
    }
}

Later, in pkg/recipes/recipecontext/context.go#L62-L87, New() attempts to parse this as a full Azure resource ID:

p, err := resources.ParseScope(providers.Azure.Scope)  // Fails: not a valid resource ID

Suggested Fix

if envDatamodel.Properties.Providers.Azure != nil {
    scope := "/subscriptions/" + envDatamodel.Properties.Providers.Azure.SubscriptionId
    if envDatamodel.Properties.Providers.Azure.ResourceGroupName != "" {
        scope += "/resourceGroups/" + envDatamodel.Properties.Providers.Azure.ResourceGroupName
    }
    config.Providers.Azure = datamodel.ProvidersAzure{
        Scope: scope,
    }
}

rad Version

CLI Version Information:
RELEASE   VERSION   BICEP     COMMIT
0.54.0    v0.54.0   0.39.26   f06410904c8b92bcc3aaa1f1ed6450981e510107

Control Plane Information:
STATUS     VERSION
Installed  0.54.0

• Radius version: (version with Radius.Core v2025-08-01-preview support)
• API version: 2025-08-01-preview

Operating system

No response

Additional context

No response

AB#18064</issue_description>

Comments on the Issue (you are @copilot in this section)

@sylvainsf Auth for Azure and AWS should have a cloud functional test