referencing keyvault properly

infrastructure/cms.bicep

@@ -5,6 +5,8 @@ targetScope = 'subscription'
 param environment string
 param databaseClient string
 
+var keyVaultName = 'kv-cms'
+
 resource resourceGroup 'Microsoft.Resources/resourceGroups@2024-07-01' = {
   name: 'rg-strapi-playground-${environment}'
   location: deployment().location
@@ -22,7 +24,7 @@ module keyVault 'modules/keyVault.bicep' = {
   scope: resourceGroup
   name: 'deployCmsKeyVault'
   params: {
-    keyVaultName: 'kv-cms'
+    keyVaultName: keyVaultName
     cmsIdentityPrincipalId: cmsIdentity.outputs.cmsIdentityPrincipalId
   }
 }
@@ -66,16 +68,16 @@ module cmsContainerApp 'modules/containerApp.bicep' = {
   }
 }
 
-resource keyVaultReference 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
+resource existingKeyVault 'Microsoft.KeyVault/vaults@2023-07-01' existing = {
   scope: resourceGroup
-  name: keyVault.outputs.resourceName
+  name: appendHash(keyVaultName)
 }
 
 module mysql 'modules/sql.bicep' = {
   scope: resourceGroup
   name: 'deployMysql'
   params: {
-    sqlServerSaPassword: keyVaultReference.getSecret('mysql-sa-password')
+    sqlServerSaPassword: existingKeyVault.getSecret('mysql-sa-password')
   }
 }