InvalidFederatedIdentityCredentialsName even though it is

[wsmelton]

Deployment that is trying to create UAI for Azure DevOps Service Connection (using new workload identity feature). We use the same Bicep module code to create UAIs for workload identity with AKS. For some reason this is failing with the following and I'm just not seeing why.

New-AzResourceGroupDeployment: 6:37:11 PM - Error: Code=InvalidTemplateDeployment; Message=The template deployment 'pipelineIdentity_20240429T233705' is not valid according to the validation procedure. The
tracking id is '000d68ea-8558-4b75-ac44-4d5e5c608010'. See inner errors for details.
New-AzResourceGroupDeployment: 6:37:11 PM - Error: Code=PreflightValidationFailed; Message=The deployment failed because Preflight Validation failed 
New-AzResourceGroupDeployment: 6:37:11 PM - Error: Code=InvalidFederatedIdentityCredentialsName; Message=The name of a federated identity credentials must be within 3 and 120 characters, only contains letters
(A-Z, a-z), numbers, hyphens and dashes and must start with a number or letter.
New-AzResourceGroupDeployment: The deployment validation failed

Attaching the built Bicep, nothing special about this:

pipelineIdentity.json

Which the name that ends up being generated I have confirmed is valid according to the error details (can even use it via portal creation): sc---LDEnterprise-Enterprise-uai-azu-dvo-dv1