resource "azurerm_service_plan" "service_plan" {
  for_each            = { for app in var.windows_web_apps : app.name => app if app.create_new_app_service_plan == true }
  name                = each.value.app_service_plan_name != null ? each.value.app_service_plan_name : "asp-${each.value.name}"
  resource_group_name = each.value.rg_name
  location            = each.value.location
  os_type             = each.value.os_type != null ? each.value.os_type : "Linux"
  sku_name            = each.value.sku_name
}

resource "azurerm_windows_web_app" "web_app" {
  for_each                                       = { for app in var.windows_web_apps : app.name => app }
  name                                           = each.value.name
  service_plan_id                                = each.value.service_plan_id != null ? each.value.service_plan_id : lookup(azurerm_service_plan.service_plan, each.key, null).id
  location                                       = each.value.location
  resource_group_name                            = each.value.rg_name
  app_settings                                   = each.value.create_new_app_insights == true && lookup(local.app_insights_map, each.value.app_insights_name, null) != null ? merge(each.value.app_settings, local.app_insights_map[each.value.app_insights_name]) : each.value.app_settings
  https_only                                     = each.value.https_only
  tags                                           = each.value.tags
  client_affinity_enabled                        = each.value.client_affinity_enabled
  client_certificate_enabled                     = each.value.client_certificate_enabled
  client_certificate_mode                        = each.value.client_certificate_mode
  client_certificate_exclusion_paths             = each.value.client_certificate_exclusion_paths
  enabled                                        = each.value.enabled
  ftp_publish_basic_authentication_enabled       = each.value.ftp_publish_basic_authentication_enable
  public_network_access_enabled                  = each.value.public_network_access_enabled
  key_vault_reference_identity_id                = each.value.key_vault_reference_identity_id
  virtual_network_subnet_id                      = each.value.virtual_network_subnet_id
  webdeploy_publish_basic_authentication_enabled = each.value.webdeploy_publish_basic_authentication_enabled
  zip_deploy_file                                = each.value.zip_deploy_file


  dynamic "logs" {
    for_each = each.value.logs != null ? [each.value.logs] : []
    content {
      detailed_error_messages = logs.value.detailed_error_messages
      failed_request_tracing  = logs.value.failed_request_tracing

      dynamic "application_logs" {
        for_each = logs.value.application_logs != null ? [logs.value.application_logs] : []
        content {
          dynamic "azure_blob_storage" {
            for_each = application_logs.value.azure_blob_storage != null ? [application_logs.value.azure_blob_storage] : []
            content {
              level             = azure_blob_storage.value.level
              sas_url           = azure_blob_storage.value.sas_url
              retention_in_days = azure_blob_storage.value.retention_in_days
            }
          }
          file_system_level = application_logs.value.file_system_level
        }
      }

      dynamic "http_logs" {
        for_each = logs.value.http_logs != null ? [logs.value.http_logs] : []
        content {
          dynamic "azure_blob_storage" {
            for_each = http_logs.value.azure_blob_storage_http != null ? [http_logs.value.azure_blob_storage_http] : []
            content {
              sas_url           = azure_blob_storage_http.value.sas_url
              retention_in_days = azure_blob_storage_http.value.retention_in_days
            }
          }

          dynamic "file_system" {
            for_each = http_logs.value.file_system != null ? [http_logs.value.file_system] : []
            content {
              retention_in_days = file_system.value.retention_in_days
              retention_in_mb   = file_system.value.retention_in_mb
            }
          }
        }
      }
    }
  }


  dynamic "identity" {
    for_each = each.value.identity_type == "SystemAssigned" ? [each.value.identity_type] : []
    content {
      type = each.value.identity_type
    }
  }

  dynamic "identity" {
    for_each = each.value.identity_type == "SystemAssigned, UserAssigned" ? [each.value.identity_type] : []
    content {
      type         = each.value.identity_type
      identity_ids = try(each.value.identity_ids, [])
    }
  }


  dynamic "identity" {
    for_each = each.value.identity_type == "UserAssigned" ? [each.value.identity_type] : []
    content {
      type         = each.value.identity_type
      identity_ids = length(try(each.value.identity_ids, [])) > 0 ? each.value.identity_ids : []
    }
  }

  dynamic "storage_account" {
    for_each = each.value.storage_account != null ? [each.value.storage_account] : []

    content {
      access_key   = storage_account.value.access_key
      account_name = storage_account.value.account_name
      name         = storage_account.value.name
      share_name   = storage_account.value.share_name
      type         = storage_account.value.type
      mount_path   = storage_account.value.mount_path
    }
  }


  dynamic "sticky_settings" {
    for_each = each.value.sticky_settings != null ? [each.value.sticky_settings] : []
    content {
      app_setting_names       = sticky_settings.value.app_setting_names
      connection_string_names = sticky_settings.value.connection_string_names
    }
  }

  dynamic "connection_string" {
    for_each = each.value.connection_string != null ? [each.value.connection_string] : []
    content {
      name  = connection_string.value.name
      type  = connection_string.value.type
      value = connection_string.value.value
    }
  }

  dynamic "backup" {
    for_each = each.value.backup != null ? [each.value.backup] : []
    content {
      name                = backup.value.name
      enabled             = backup.value.enabled
      storage_account_url = try(backup.value.storage_account_url, var.backup_sas_url)

      dynamic "schedule" {
        for_each = backup.value.schedule != null ? [backup.value.schedule] : []
        content {
          frequency_interval       = schedule.value.frequency_interval
          frequency_unit           = schedule.value.frequency_unit
          keep_at_least_one_backup = schedule.value.keep_at_least_one_backup
          retention_period_days    = schedule.value.retention_period_days
          start_time               = schedule.value.start_time
        }
      }
    }
  }

  dynamic "auth_settings" {
    for_each = each.value.auth_settings != null ? [each.value.auth_settings] : []

    content {
      enabled                        = auth_settings.value.enabled
      additional_login_parameters    = auth_settings.value.additional_login_parameters
      allowed_external_redirect_urls = auth_settings.value.allowed_external_redirect_urls
      default_provider               = auth_settings.value.default_provider
      issuer                         = auth_settings.value.issuer
      runtime_version                = auth_settings.value.runtime_version
      token_refresh_extension_hours  = auth_settings.value.token_refresh_extension_hours
      token_store_enabled            = auth_settings.value.token_store_enabled
      unauthenticated_client_action  = auth_settings.value.unauthenticated_client_action

      dynamic "active_directory" {
        for_each = auth_settings.value.active_directory != null ? [auth_settings.value.active_directory] : []

        content {
          client_id         = active_directory.value.client_id
          client_secret     = active_directory.value.client_secret
          allowed_audiences = active_directory.value.allowed_audiences
        }
      }

      dynamic "facebook" {
        for_each = auth_settings.value.facebook != null ? [auth_settings.value.facebook] : []

        content {
          app_id       = facebook.value.app_id
          app_secret   = facebook.value.app_secret
          oauth_scopes = facebook.value.oauth_scopes
        }
      }

      dynamic "google" {
        for_each = auth_settings.value.google != null ? [auth_settings.value.google] : []

        content {
          client_id     = google.value.client_id
          client_secret = google.value.client_secret
          oauth_scopes  = google.value.oauth_scopes
        }
      }

      dynamic "microsoft" {
        for_each = auth_settings.value.microsoft != null ? [auth_settings.value.microsoft] : []

        content {
          client_id     = microsoft.value.client_id
          client_secret = microsoft.value.client_secret
          oauth_scopes  = microsoft.value.oauth_scopes
        }
      }

      dynamic "twitter" {
        for_each = auth_settings.value.twitter != null ? [auth_settings.value.twitter] : []

        content {
          consumer_key    = twitter.value.consumer_key
          consumer_secret = twitter.value.consumer_secret
        }
      }

      dynamic "github" {
        for_each = auth_settings.value.github != null ? [auth_settings.value.github] : []

        content {
          client_id                  = github.value.client_id
          client_secret              = github.value.client_secret
          client_secret_setting_name = github.value.client_secret_setting_name
          oauth_scopes               = github.value.oauth_scopes
        }
      }
    }
  }

  dynamic "auth_settings_v2" {
    for_each = each.value.auth_settings_v2 != null ? [each.value.auth_settings_v2] : []

    content {
      auth_enabled                            = auth_settings_v2.value.auth_enabled
      runtime_version                         = auth_settings_v2.value.runtime_version
      config_file_path                        = auth_settings_v2.value.config_file_path
      require_authentication                  = auth_settings_v2.value.require_authentication
      unauthenticated_action                  = auth_settings_v2.value.unauthenticated_action
      default_provider                        = auth_settings_v2.value.default_provider
      excluded_paths                          = toset(auth_settings_v2.value.excluded_paths)
      require_https                           = auth_settings_v2.value.require_https
      http_route_api_prefix                   = auth_settings_v2.value.http_route_api_prefix
      forward_proxy_convention                = auth_settings_v2.value.forward_proxy_convention
      forward_proxy_custom_host_header_name   = auth_settings_v2.value.forward_proxy_custom_host_header_name
      forward_proxy_custom_scheme_header_name = auth_settings_v2.value.forward_proxy_custom_scheme_header_name

      dynamic "apple_v2" {
        for_each = auth_settings_v2.value.apple_v2 != null ? [auth_settings_v2.value.apple_v2] : []

        content {
          client_id                  = apple_v2.value.client_id
          client_secret_setting_name = apple_v2.value.client_secret_setting_name
          login_scopes               = toset(apple_v2.value.login_scopes)
        }
      }

      dynamic "active_directory_v2" {
        for_each = auth_settings_v2.value.active_directory_v2 != null ? [auth_settings_v2.value.active_directory_v2] : []

        content {
          client_id                            = active_directory_v2.value.client_id
          tenant_auth_endpoint                 = active_directory_v2.value.tenant_auth_endpoint
          client_secret_setting_name           = active_directory_v2.value.client_secret_setting_name
          client_secret_certificate_thumbprint = active_directory_v2.value.client_secret_certificate_thumbprint
          jwt_allowed_groups                   = toset(active_directory_v2.value.jwt_allowed_groups)
          jwt_allowed_client_applications      = toset(active_directory_v2.value.jwt_allowed_client_applications)
          www_authentication_disabled          = active_directory_v2.value.www_authentication_disabled
          allowed_groups                       = toset(active_directory_v2.value.allowed_groups)
          allowed_identities                   = toset(active_directory_v2.value.allowed_identities)
          allowed_applications                 = toset(active_directory_v2.value.allowed_applications)
          login_parameters                     = active_directory_v2.value.login_parameters
          allowed_audiences                    = toset(active_directory_v2.value.allowed_audiences)
        }
      }

      dynamic "azure_static_web_app_v2" {
        for_each = auth_settings_v2.value.azure_static_web_app_v2 != null ? [auth_settings_v2.value.azure_static_web_app_v2] : []

        content {
          client_id = azure_static_web_app_v2.value.client_id
        }
      }

      dynamic "custom_oidc_v2" {
        for_each = auth_settings_v2.value.custom_oidc_v2 != null ? [auth_settings_v2.value.custom_oidc_v2] : []

        content {
          name                          = custom_oidc_v2.value.name
          client_id                     = custom_oidc_v2.value.client_id
          openid_configuration_endpoint = custom_oidc_v2.value.openid_configuration_endpoint
          name_claim_type               = custom_oidc_v2.value.name_claim_type
          scopes                        = toset(custom_oidc_v2.value.scopes)
          client_credential_method      = custom_oidc_v2.value.client_credential_method
          client_secret_setting_name    = custom_oidc_v2.value.client_secret_setting_name
          authorisation_endpoint        = custom_oidc_v2.value.authorisation_endpoint
          token_endpoint                = custom_oidc_v2.value.token_endpoint
          issuer_endpoint               = custom_oidc_v2.value.issuer_endpoint
          certification_uri             = custom_oidc_v2.value.certification_uri
        }
      }


      dynamic "facebook_v2" {
        for_each = auth_settings_v2.value.facebook_v2 != null ? [auth_settings_v2.value.facebook_v2] : []

        content {
          graph_api_version       = facebook_v2.value.graph_api_version
          login_scopes            = toset(facebook_v2.value.login_scopes)
          app_id                  = facebook_v2_value.app_id
          app_secret_setting_name = facebook_v2.value.app_secret_setting_name
        }
      }

      dynamic "github_v2" {
        for_each = auth_settings_v2.value.github_v2 != null ? [auth_settings_v2.value.github_v2] : []

        content {
          client_id                  = github_v2.value.client_id
          client_secret_setting_name = github_v2.value.client_secret_setting_name
          login_scopes               = toset(github_v2.value.login_scopes)
        }
      }

      dynamic "google_v2" {
        for_each = auth_settings_v2.value.google_v2 != null ? [auth_settings_v2.value.google_v2] : []

        content {
          client_id                  = google_v2.value.client_id
          client_secret_setting_name = google_v2.value.client_secret_setting_name
          allowed_audiences          = toset(google_v2.value.allowed_audiences)
          login_scopes               = toset(google_v2.value.login_scopes)
        }
      }

      dynamic "microsoft_v2" {
        for_each = auth_settings_v2.value.microsoft_v2 != null ? [auth_settings_v2.value.microsoft_v2] : []

        content {
          client_id                  = microsoft_v2.value.client_id
          client_secret_setting_name = microsoft_v2.value.client_secret_setting_name
          allowed_audiences          = toset(microsoft_v2.value.allowed_audiences)
          login_scopes               = toset(microsoft_v2.value.login_scopes)
        }
      }

      dynamic "twitter_v2" {
        for_each = auth_settings_v2.value.twitter_v2 != null ? [auth_settings_v2.value.twitter_v2] : []
        content {
          consumer_key                 = twitter_v2.value.consumer_key
          consumer_secret_setting_name = twitter_v2.value.consumer_secret_setting_name
        }
      }

      dynamic "login" {
        for_each = auth_settings_v2.value.login != null ? [auth_settings_v2.value.login] : []

        content {
          logout_endpoint                   = login.value.logout_endpoint
          token_store_enabled               = login.value.token_store_enabled
          token_refresh_extension_time      = login.value.token_refresh_extension_time
          token_store_path                  = login.value.token_store_path
          token_store_sas_setting_name      = login.value.token_store_sas_setting_name
          preserve_url_fragments_for_logins = login.value.preserve_url_fragments_for_logins
          allowed_external_redirect_urls    = toset(login.value.allowed_external_redirect_urls)
          cookie_expiration_convention      = login.value.cookie_expiration_convention
          cookie_expiration_time            = login.value.cookie_expiration_time
          validate_nonce                    = login.value.validate_nonce
          nonce_expiration_time             = login.value.nonce_expiration_time
        }
      }
    }
  }


  dynamic "site_config" {
    for_each = each.value.site_config != null ? [each.value.site_config] : []

    content {
      always_on                                     = site_config.value.always_on
      api_definition_url                            = site_config.value.api_definition_url
      api_management_api_id                         = site_config.value.api_management_api_id
      app_command_line                              = site_config.value.app_command_line
      container_registry_managed_identity_client_id = site_config.value.container_registry_managed_identity_client_id
      container_registry_use_managed_identity       = site_config.value.container_registry_use_managed_identity
      ftps_state                                    = site_config.value.ftps_state
      health_check_path                             = site_config.value.health_check_path
      health_check_eviction_time_in_min             = site_config.value.health_check_eviction_time_in_min
      http2_enabled                                 = site_config.value.http2_enabled
      load_balancing_mode                           = site_config.value.load_balancing_mode
      managed_pipeline_mode                         = site_config.value.managed_pipeline_mode
      minimum_tls_version                           = site_config.value.minimum_tls_version
      remote_debugging_enabled                      = site_config.value.remote_debugging_enabled
      remote_debugging_version                      = site_config.value.remote_debugging_version
      scm_minimum_tls_version                       = site_config.value.scm_minimum_tls_version
      scm_use_main_ip_restriction                   = site_config.value.scm_use_main_ip_restriction
      use_32_bit_worker                             = site_config.value.use_32_bit_worker
      websockets_enabled                            = site_config.value.websockets_enabled
      vnet_route_all_enabled                        = site_config.value.vnet_route_all_enabled
      worker_count                                  = site_config.value.worker_count
      default_documents                             = toset(site_config.value.default_documents)

      dynamic "auto_heal_setting" {
        for_each = site_config.value.auto_heal_setting != null ? [site_config.value.auto_heal_setting] : []
        content {

          dynamic "action" {
            for_each = auto_heal_setting.value.action != null ? [auto_heal_setting.value.action] : []
            content {
              action_type                    = action.value.action_type
              minimum_process_execution_time = action.value.minimum_process_execution_time

              dynamic "custom_action" {
                for_each = action.value.custom_action != null ? [action.value.custom_action] : []
                content {
                  executable = custom_action.value.executable
                  parameters = custom_action.value.parameters
                }
              }
            }
          }

          dynamic "trigger" {
            for_each = auto_heal_setting.value.trigger != null ? [auto_heal_setting.value.trigger] : []
            content {
              private_memory_kb = trigger.value.private_memory_kb

              dynamic "slow_request_with_path" {
                for_each = trigger.value.slow_request_with_path != null ? trigger.value.slow_request_with_path : []
                content {
                  count      = slow_request_with_path.value.count
                  time_taken = slow_request_with_path.value.time_taken
                  path       = slow_request_with_path.value.path
                  interval   = slow_request_with_path.value.interval
                }
              }

              dynamic "requests" {
                for_each = trigger.value.requests != null ? [trigger.value.requests] : []
                content {
                  count    = requests.value.count
                  interval = requests.value.interval
                }
              }

              dynamic "slow_request" {
                for_each = trigger.value.slow_request != null ? [trigger.value.slow_request] : []
                content {
                  count      = slow_request.value.count
                  interval   = slow_request.value.interval
                  time_taken = slow_request.value.time_taken
                }
              }

              dynamic "status_code" {
                for_each = trigger.value.status_code != null ? trigger.value.status_code : []
                content {
                  count             = status_code.value.count
                  interval          = status_code.value.interval
                  status_code_range = status_code.value.status_code_range
                  path              = status_code.value.path
                  sub_status        = status_code.value.sub_status
                  win32_status_code = status_code.value.win32_status_code
                }
              }
            }
          }
        }
      }


      dynamic "application_stack" {
        for_each = site_config.value.application_stack != null ? [site_config.value.application_stack] : []
        content {
          current_stack                = application_stack.value.current_stack
          docker_image_name            = application_stack.value.docker_image_name
          docker_registry_url          = application_stack.value.docker_registry_url
          docker_registry_username     = application_stack.value.docker_registry_username
          docker_registry_password     = application_stack.value.docker_registry_password
          dotnet_version               = application_stack.value.dotnet_version
          dotnet_core_version          = application_stack.value.dotnet_core_version
          tomcat_version               = application_stack.value.tomcat_version
          java_embedded_server_enabled = application_stack.value.java_embedded_server_enabled
          java_version                 = application_stack.value.java_version
          node_version                 = application_stack.value.node_version
          php_version                  = application_stack.value.php_version
          python                       = application_stack.value.python
        }
      }



      dynamic "cors" {
        for_each = site_config.value.cors != null ? [site_config.value.cors] : []
        content {
          allowed_origins     = cors.value.allowed_origins
          support_credentials = cors.value.support_credentials
        }
      }

      dynamic "ip_restriction" {
        for_each = site_config.value.ip_restriction != null ? [site_config.value.ip_restriction] : []

        content {
          ip_address                = ip_restriction.value.ip_address
          service_tag               = ip_restriction.value.service_tag
          virtual_network_subnet_id = ip_restriction.value.virtual_network_subnet_id
          name                      = ip_restriction.value.name
          priority                  = ip_restriction.value.priority
          action                    = ip_restriction.value.action

          dynamic "headers" {
            for_each = ip_restriction.value.headers != null ? [ip_restriction.value.headers] : []

            content {
              x_azure_fdid      = headers.value.x_azure_fdid
              x_fd_health_probe = headers.value.x_fd_health_prob
              x_forwarded_for   = headers.value.x_forwarded_for
              x_forwarded_host  = headers.value.x_forwarded_host
            }
          }
        }
      }

      dynamic "scm_ip_restriction" {
        for_each = site_config.value.scm_ip_restriction != null ? [site_config.value.scm_ip_restriction] : []

        content {
          ip_address                = scm_ip_restriction.value.ip_address
          service_tag               = scm_ip_restriction.value.service_tag
          virtual_network_subnet_id = scm_ip_restriction.value.virtual_network_subnet_id
          name                      = scm_ip_restriction.value.name
          priority                  = scm_ip_restriction.value.priority
          action                    = scm_ip_restriction.value.action

          dynamic "headers" {
            for_each = scm_ip_restriction.value.headers != null ? [scm_ip_restriction.value.headers] : []

            content {
              x_azure_fdid      = headers.value.x_azure_fdid
              x_fd_health_probe = headers.value.x_fd_health_prob
              x_forwarded_for   = headers.value.x_forwarded_for
              x_forwarded_host  = headers.value.x_forwarded_host
            }
          }
        }
      }
    }
  }
}

Requirements

No requirements.

Providers

Name	Version
azurerm	n/a

Modules

No modules.

Resources

Name	Type
azurerm_application_insights.app_insights_workspace	resource
azurerm_service_plan.service_plan	resource
azurerm_windows_web_app.web_app	resource

Inputs

Name	Description	Type	Default	Required
windows_web_apps	List of Azure Windows web Apps configurations	list(object({ name = string rg_name = string location = string create_new_app_service_plan = optional(bool, true) app_service_plan_name = optional(string) service_plan_id = optional(string) os_type = optional(string) sku_name = string app_settings = map(string) https_only = optional(bool) tags = optional(map(string)) client_affinity_enabled = optional(bool) client_certificate_enabled = optional(bool) client_certificate_exclusion_paths = optional(string) client_certificate_mode = optional(string) enabled = optional(bool, true) content_share_force_disabled = optional(bool) identity_type = optional(string) ftp_publish_basic_authentication_enable = optional(bool, false) public_network_access_enabled = optional(bool, true) key_vault_reference_identity_id = optional(string) virtual_network_subnet_id = optional(string) webdeploy_publish_basic_authentication_enabled = optional(bool, false) zip_deploy_file = optional(string) identity_ids = optional(list(string)) create_new_app_insights = optional(bool, false) workspace_id = optional(string) app_insights_name = optional(string) app_insights_type = optional(string, "Web") app_insights_daily_cap_in_gb = optional(number) app_insights_daily_data_cap_notifications_disabled = optional(bool, false) app_insights_internet_ingestion_enabled = optional(bool) app_insights_internet_query_enabled = optional(bool) app_insights_local_authentication_disabled = optional(bool, true) app_insights_force_customer_storage_for_profile = optional(bool, false) app_insights_sampling_percentage = optional(number, 100) logs = optional(object({ detailed_error_messages = optional(bool) failed_request_tracing = optional(bool) application_logs = optional(object({ azure_blob_storage = optional(object({ level = optional(string) sas_url = optional(string) retention_in_days = optional(number) })) file_system_level = optional(string) })) http_logs = optional(object({ azure_blob_storage = optional(object({ sas_url = optional(string) retention_in_days = optional(number) })) file_system = optional(object({ retention_in_days = optional(number) retention_in_mb = optional(number) })) })) })) storage_account = optional(object({ access_key = string account_name = string name = string share_name = string type = string mount_path = optional(string) })) sticky_settings = optional(object({ app_setting_names = optional(list(string)) connection_string_names = optional(list(string)) })) connection_string = optional(object({ name = optional(string) type = optional(string) value = optional(string) })) backup = optional(object({ name = optional(string) enabled = optional(bool) storage_account_url = optional(string) schedule = optional(object({ frequency_interval = optional(string) frequency_unit = optional(string) keep_at_least_one_backup = optional(bool) retention_period_days = optional(number) start_time = optional(string) })) })) auth_settings_v2 = optional(object({ auth_enabled = optional(bool) runtime_version = optional(string) config_file_path = optional(string) require_authentication = optional(bool) unauthenticated_action = optional(string) default_provider = optional(string) excluded_paths = optional(list(string)) require_https = optional(bool) http_route_api_prefix = optional(string) forward_proxy_convention = optional(string) forward_proxy_custom_host_header_name = optional(string) forward_proxy_custom_scheme_header_name = optional(string) apple_v2 = optional(object({ client_id = string client_secret_setting_name = string login_scopes = list(string) })) active_directory_v2 = optional(object({ client_id = string tenant_auth_endpoint = string client_secret_setting_name = optional(string) client_secret_certificate_thumbprint = optional(string) jwt_allowed_groups = optional(list(string)) jwt_allowed_client_applications = optional(list(string)) www_authentication_disabled = optional(bool) allowed_groups = optional(list(string)) allowed_identities = optional(list(string)) allowed_applications = optional(list(string)) login_parameters = optional(map(string)) allowed_audiences = optional(list(string)) })) azure_static_web_app_v2 = optional(object({ client_id = string })) custom_oidc_v2 = optional(list(object({ name = string client_id = string openid_configuration_endpoint = string name_claim_type = optional(string) scopes = optional(list(string)) client_credential_method = string client_secret_setting_name = string authorisation_endpoint = string token_endpoint = string issuer_endpoint = string certification_uri = string }))) facebook_v2 = optional(object({ app_id = string app_secret_setting_name = string graph_api_version = optional(string) login_scopes = optional(list(string)) })) github_v2 = optional(object({ client_id = string client_secret_setting_name = string login_scopes = optional(list(string)) })) google_v2 = optional(object({ client_id = string client_secret_setting_name = string allowed_audiences = optional(list(string)) login_scopes = optional(list(string)) })) microsoft_v2 = optional(object({ client_id = string client_secret_setting_name = string allowed_audiences = optional(list(string)) login_scopes = optional(list(string)) })) twitter_v2 = optional(object({ consumer_key = string consumer_secret_setting_name = string })) login = optional(object({ logout_endpoint = optional(string) token_store_enabled = optional(bool) token_refresh_extension_time = optional(number) token_store_path = optional(string) token_store_sas_setting_name = optional(string) preserve_url_fragments_for_logins = optional(bool) allowed_external_redirect_urls = optional(list(string)) cookie_expiration_convention = optional(string) cookie_expiration_time = optional(string) validate_nonce = optional(bool) nonce_expiration_time = optional(string) })) })) auth_settings = optional(object({ enabled = optional(bool) additional_login_parameters = optional(map(string)) allowed_external_redirect_urls = optional(list(string)) default_provider = optional(string) issuer = optional(string) runtime_version = optional(string) token_refresh_extension_hours = optional(number) token_store_enabled = optional(bool) unauthenticated_client_action = optional(string) active_directory = optional(object({ client_id = optional(string) client_secret = optional(string) allowed_audiences = optional(list(string)) })) facebook = optional(object({ app_id = optional(string) app_secret = optional(string) oauth_scopes = optional(list(string)) })) google = optional(object({ client_id = optional(string) client_secret = optional(string) oauth_scopes = optional(list(string)) })) microsoft = optional(object({ client_id = optional(string) client_secret = optional(string) oauth_scopes = optional(list(string)) })) twitter = optional(object({ consumer_key = optional(string) consumer_secret = optional(string) })) github = optional(object({ client_id = optional(string) client_secret = optional(string) client_secret_setting_name = optional(string) oauth_scopes = optional(list(string)) })) })) site_config = optional(object({ always_on = optional(bool) api_definition_url = optional(string) api_management_api_id = optional(string) app_command_line = optional(string) container_registry_managed_identity_client_id = optional(string) container_registry_use_managed_identity = optional(bool) ftps_state = optional(string) health_check_path = optional(string) health_check_eviction_time_in_min = optional(number) http2_enabled = optional(bool) load_balancing_mode = optional(string) managed_pipeline_mode = optional(string) minimum_tls_version = optional(string) remote_debugging_enabled = optional(bool) remote_debugging_version = optional(string) scm_minimum_tls_version = optional(string) scm_use_main_ip_restriction = optional(bool) use_32_bit_worker = optional(bool) websockets_enabled = optional(bool) vnet_route_all_enabled = optional(bool) worker_count = optional(number) default_documents = optional(list(string)) auto_heal_setting = optional(object({ action = optional(object({ action_type = optional(string) minimum_process_execution_time = optional(string) custom_action = optional(object({ executable = optional(string) parameters = optional(string) })) })) trigger = optional(object({ private_memory_kb = optional(number) slow_request_with_path = optional(list(object({ count = optional(string) time_taken = optional(string) path = optional(string) interval = optional(string) }))) requests = optional(object({ count = optional(string) interval = optional(string) })) slow_request = optional(object({ count = optional(string) interval = optional(string) time_taken = optional(string) })) status_code = optional(list(object({ count = optional(string) interval = optional(string) status_code_range = optional(string) path = optional(string) sub_status = optional(string) win32_status_code = optional(string) }))) })) })) application_stack = optional(object({ current_stack = optional(string) use_custom_runtime = optional(bool) docker_image_name = optional(string) docker_registry_url = optional(string) docker_registry_username = optional(string) docker_registry_password = optional(string) dotnet_version = optional(string) dotnet_core_version = optional(string) tomcat_version = optional(string) java_embedded_server_enabled = optional(bool) java_version = optional(string) node_version = optional(string) php_version = optional(string) python = optional(bool) })) cors = optional(object({ allowed_origins = optional(list(string)) support_credentials = optional(bool) })) ip_restriction = optional(list(object({ ip_address = optional(string) service_tag = optional(string) virtual_network_subnet_id = optional(string) name = optional(string) priority = optional(number) action = optional(string) headers = optional(object({ x_azure_fdid = optional(string) x_fd_health_probe = optional(string) x_forwarded_for = optional(string) x_forwarded_host = optional(string) })) }))) scm_ip_restriction = optional(list(object({ ip_address = optional(string) service_tag = optional(string) virtual_network_subnet_id = optional(string) name = optional(string) priority = optional(number) action = optional(string) headers = optional(object({ x_azure_fdid = optional(string) x_fd_health_probe = optional(string) x_forwarded_for = optional(string) x_forwarded_host = optional(string) })) }))) })) }))	[]	no

Outputs

Name	Description
service_plans_ids	The IDs of the Service Plans.
web_app_identities	The identities of the Web app.
web_app_identity_principal_ids	The Principal IDs associated with the Managed Service Identity.
web_app_identity_tenant_ids	The Tenant IDs associated with the Managed Service Identity.
web_app_names	The default name of the windows Function Apps.
web_apps_custom_domain_verification_id	The custom domain verification IDs of the windows Function Apps.
web_apps_default_hostnames	The default hostnames of the windows Function Apps.
web_apps_outbound_ip_addresses	The outbound IP addresses of the windows Function Apps.
web_apps_possible_outbound_ip_addresses	The possible outbound IP addresses of the windows Function Apps.
web_apps_site_credentials	The site credentials for the windows Function Apps.
windows_web_apps_custom_domain_verification_id	The custom domain verification IDs of the windows web apps.
windows_web_apps_hosting_environment_id	The hosting environment IDs of the windows web apps.
windows_web_apps_ids	The IDs of the windows Function Apps.
windows_web_apps_kind	The kind value of the windows web apps.
windows_web_apps_outbound_ip_address_list	The list of outbound IP addresses of the windows web apps.
windows_web_apps_possible_outbound_ip_address_list	The list of possible outbound IP addresses of the windows web apps.