terraform-azurerm-function-app

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #cli #claude-code #codex #developer-tools #react #windows

terraform-azurerm-function-app

★ 21 Open GitHub ↗

Terraform module for Azure Function App

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Azure Function App
[![Changelog](https://img.shields.io/badge/changelog-release-green.svg)](https://raw.githubusercontent.com/claranet/terraform-azurerm-function-app/master/CHANGELOG.md) [![Notice](https://img.shields.io/badge/notice-copyright-blue.svg)](https://raw.githubusercontent.com/claranet/terraform-azurerm-function-app/master/NOTICE) [![Apache V2 License](https://img.shields.io/badge/license-Apache%20V2-orange.svg)](https://raw.githubusercontent.com/claranet/terraform-azurerm-function-app/master/LICENSE) [![OpenTofu Registry](https://img.shields.io/badge/opentofu-registry-yellow.svg)](https://search.opentofu.org/module/claranet/function-app/azurerm/)

This Terraform module creates an [Azure Function App](https://docs.microsoft.com/en-us/azure/azure-functions/)
with its [App Service Plan](https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans),
a consumption plan by default.
A [Storage Account](https://docs.microsoft.com/en-us/azure/storage/) and an [Application Insights](https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-insights-overview)
are required and are created if not provided.
This module allows to deploy a application from a local or remote ZIP file that will be stored on the associated storage
account.

The module automatically selects the appropriate Function App resource type:
* `Linux` - Creates `azurerm_linux_function_app` when `var.os_type = "Linux"`
  - `Flex` - Creates `azurerm_linux_function_app_flex_consumption` when `var.os_type = "Linux"` and `var.sku_name = "FC1"`
* `Windows` - Creates `azurerm_windows_function_app` when `var.os_type = "Windows"`

Azure Functions v3 are now supported by this module and is the default one.

## Limitations

Based on a current limitation, you cannot mix Windows and Linux apps in the same resource group.

Limitations documentation: [docs.microsoft.com/en-us/azure/app-service/containers/app-service-linux-intro#limitations](https://docs.microsoft.com/en-us/azure/app-service/containers/app-service-linux-intro#limitations)

## Global versioning rule for Claranet Azure modules

| Module version | Terraform version | OpenTofu version | AzureRM version |
| -------------- | ----------------- | ---------------- | --------------- |
| >= 8.x.x | **Unverified** | 1.8.x | >= 4.0 |
| >= 7.x.x | 1.3.x | | >= 3.0 |
| >= 6.x.x | 1.x | | >= 3.0 |
| >= 5.x.x | 0.15.x | | >= 2.0 |
| >= 4.x.x | 0.13.x / 0.14.x | | >= 2.0 |
| >= 3.x.x | 0.12.x | | >= 2.0 |
| >= 2.x.x | 0.12.x | | < 2.0 |
| < 2.x.x | 0.11.x | | < 2.0 |

## Contributing

If you want to contribute to this repository, feel free to use our [pre-commit](https://pre-commit.com/) git hook configuration
which will help you automatically update and format some files for you by enforcing our Terraform code module best-practices.

More details are available in the [CONTRIBUTING.md](./CONTRIBUTING.md#pull-request-process) file.

## Usage

This module is optimized to work with the [Claranet terraform-wrapper](https://github.com/claranet/terraform-wrapper) tool
which set some terraform variables in the environment needed by this module.
More details about variables set by the `terraform-wrapper` available in the [documentation](https://github.com/claranet/terraform-wrapper#environment).

⚠️ Since modules version v8.0.0, we do not maintain/check anymore the compatibility with
[Hashicorp Terraform](https://github.com/hashicorp/terraform/). Instead, we recommend to use [OpenTofu](https://github.com/opentofu/opentofu/).

```hcl
### Linux
module "function_app_linux" {
  source  = "claranet/function-app/azurerm"
  version = "x.x.x"

location       = module.azure_region.location
  location_short = module.azure_region.location_short
  client_name    = var.client_name
  environment    = var.environment
  stack          = var.stack

resource_group_name = module.rg.name

name_prefix = "hello"

os_type = "Linux"

function_app_version = 4
  site_config = {
    application_stack = {
      python_version = "3.12"
    }
  }

application_settings = {
    "tracker_id"      = "AJKGDFJKHFDS"
    "backend_api_url" = "https://backend.domain.tld/api"
  }

application_insights_log_analytics_workspace_id = module.logs.id

storage_account_identity_type = "SystemAssigned"

logs_destinations_ids = [
    module.logs.id,
    module.logs.storage_account_id,
  ]

extra_tags = {
    foo = "bar"
  }
}

### Windows
module "function_app_windows" {
  source  = "claranet/function-app/azurerm"
  version = "x.x.x"

location       = module.azure_region.location
  location_short = module.azure_region.location_short
  client_name    = var.client_name
  environment    = var.environment
  stack          = var.stack

resource_group_name = module.rg.name

name_prefix = "hello"

os_type = "Windows"

application_settings = {
    "tracker_id"      = "AJKGDFJKHFDS"
    "backend_api_url" = "https://backend.domain.tld/api"
  }

application_insights_log_analytics_workspace_id = module.logs.id

storage_account_identity_type = "SystemAssigned"

logs_destinations_ids = [
    module.logs.id,
    module.logs.storage_account_id,
  ]

extra_tags = {
    foo = "bar"
  }
}
```

## Providers

| Name | Version |
| ---- | ------- |
| azurecaf | >= 1.2.28 |
| azurerm | ~> 4.35 |
| external | ~> 2.0 |

## Modules

| Name | Source | Version |
| ---- | ------ | ------- |
| diagnostics | claranet/diagnostic-settings/azurerm | ~> 8.2.0 |
| service\_plan | claranet/app-service-plan/azurerm | ~> 8.3.0 |
| staging\_slot | ./modules/slot | n/a |
| storage | claranet/storage-account/azurerm | ~> 8.6.0 |

## Resources

| Name | Type |
| ---- | ---- |
| [azurerm_application_insights.main](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/application_insights) | resource |
| [azurerm_function_app_flex_consumption.main](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app_flex_consumption) | resource |
| [azurerm_linux_function_app.main](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/linux_function_app) | resource |
| [azurerm_storage_account_network_rules.main](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_account_network_rules) | resource |
| [azurerm_storage_blob.package_blob](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_blob) | resource |
| [azurerm_storage_container.flex_container](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_container) | resource |
| [azurerm_storage_container.package_container](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_container) | resource |
| [azurerm_windows_function_app.main](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/windows_function_app) | resource |
| [azurecaf_name.application_insights](https://registry.terraform.io/providers/claranet/azurecaf/latest/docs/data-sources/name) | data source |
| [azurecaf_name.function_app](https://registry.terraform.io/providers/claranet/azurecaf/latest/docs/data-sources/name) | data source |
| [azurerm_application_insights.main](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/application_insights) | data source |
| [azurerm_service_plan.existing](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/service_plan) | data source |
| [azurerm_storage_account.main](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/storage_account) | data source |
| [azurerm_storage_account_sas.package_sas](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/storage_account_sas) | data source |
| [azurerm_subscription.current](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/subscription) | data source |
| [external_external.function_app_settings](https://registry.terraform.io/providers/hashicorp/external/latest/docs/data-sources/external) | data source |

## Inputs

| Name | Description | Type | Default | Required |
| ---- | ----------- | ---- | ------- | :------: |
| allowed\_ips | IP restriction for Function in CIDR format. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#ip_restriction). | `list(string)` | `[]` | no |
| allowed\_service\_tags | Service Tags restriction for Function App. [See documentation](https://www.terraform.io/docs/providers/azurerm/r/function_app.html#ip_restriction). | `list(string)` | `[]` | no |
| allowed\_subnet\_ids | Subnet restriction for Function App. [See documentation](https://www.terraform.io/docs/providers/azurerm/r/function_app.html#ip_restriction). | `list(string)` | `[]` | no |
| always\_ready\_functions | Set the number of always-ready instances for each function in your app. Only affects apps on Flex Consumption Plan. See [documentation](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-plan#always-ready-instances) for more details. | <pre>list(object({ name = string instance_count = number }))</pre> | `[]` | no |
| app\_service\_environment\_id | ID of the App Service Environment to create this Service Plan in. Requires an Isolated SKU. Use one of I1, I2, I3 for azurerm\_app\_service\_environment, or I1v2, I2v2, I3v2 for azurerm\_app\_service\_environment\_v3. | `string` | `null` | no |
| application\_insights\_custom\_name | Custom name for application insights deployed with function app. | `string` | `""` | no |
| application\_insights\_daily\_data\_cap | Daily data volume cap (in GB) for Application Insights. | `number` | `null` | no |
| application\_insights\_daily\_data\_cap\_notifications\_disabled | Whether disable email notifications when data volume cap is met. | `bool` | `null` | no |
| application\_insights\_enabled | Whether Application Insights should be deployed. | `bool` | `true` | no |
| application\_insights\_extra\_tags | Extra tags to add to Application Insights. | `map(string)` | `{}` | no |
| application\_insights\_force\_customer\_storage\_for\_profiler | Whether to enforce users to create their own Storage Account for profiling in Application Insights. | `bool` | `false` | no |
| application\_insights\_id | ID of the existing Application Insights to use instead of deploying a new one. | `string` | `null` | no |
| application\_insights\_internet\_ingestion\_enabled | Whether ingestion support from Application Insights component over the Public Internet is enabled. | `bool` | `true` | no |
| application\_insights\_internet\_query\_enabled | Whether querying support from Application Insights component over the Public Internet is enabled. | `bool` | `true` | no |
| application\_insights\_ip\_masking\_disabled | Whether IP masking in logs is disabled. | `bool` | `false` | no |
| application\_insights\_local\_authentication\_disabled | Whether Non-Azure AD based authentication is disabled. | `bool` | `false` | no |
| application\_insights\_log\_analytics\_workspace\_id | ID of the Log Analytics Workspace to be used with Application Insights. | `string` | `null` | no |
| application\_insights\_name\_prefix | Application Insights name prefix. | `string` | `""` | no |
| application\_insights\_retention | Retention period (in days) for logs. | `number` | `90` | no |
| application\_insights\_sampling\_percentage | Percentage of data produced by the monitored application sampled for Application Insights telemetry. | `number` | `null` | no |
| application\_insights\_type | Application Insights type if need to be generated. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/application_insights#application_type). | `string` | `"web"` | no |
| application\_settings | Function App application settings. | `map(string)` | `{}` | no |
| application\_settings\_drift\_ignore | Ignore drift from settings manually set. | `bool` | `true` | no |
| application\_zip\_package\_path | Local or remote path of a zip package to deploy on the Function App. | `string` | `null` | no |
| auth\_settings\_v2 | Authentication settings V2. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/linux_web_app#auth_settings_v2). | `any` | `{}` | no |
| builtin\_logging\_enabled | Whether built-in logging is enabled. | `bool` | `true` | no |
| client\_certificate\_enabled | Whether the Function App uses client certificates. | `bool` | `null` | no |
| client\_certificate\_mode | The mode of the Function App's client certificates requirement for incoming requests. Possible values are `Required`, `Optional`, and `OptionalInteractiveUser`. | `string` | `null` | no |
| client\_name | Client name/account used in naming. | `string` | n/a | yes |
| default\_tags\_enabled | Option to enable or disable default tags. | `bool` | `true` | no |
| diagnostic\_settings\_custom\_name | Custom name of the diagnostics settings, name will be `default` if not set. | `string` | `"default"` | no |
| environment | Project environment. | `string` | n/a | yes |
| extra\_tags | Extra tags to add. | `map(string)` | `{}` | no |
| function\_app\_custom\_name | Custom name for function app. | `string` | `""` | no |
| function\_app\_extra\_tags | Extra tags to add to Function App. | `map(string)` | `{}` | no |
| function\_app\_name\_prefix | Function App name prefix. | `string` | `""` | no |
| function\_app\_version | Version of the Function App runtime to use. | `number` | `3` | no |
| https\_only | Whether HTTPS traffic only is enabled. | `bool` | `true` | no |
| identity\_ids | User Assigned Identities IDs to add to Function App. Mandatory if type is `UserAssigned`. | `list(string)` | `null` | no |
| identity\_type | Add a Managed Identity (MSI) to the Function App. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned` which assigns both a system managed identity as well as the specified user assigned identities. | `string` | `"SystemAssigned"` | no |
| instance\_memory\_mb | The amount of memory in megabytes allocated to each instance of the Function App. Possible values are `2048`, `4096`, `8192`, and `16384`. Only affects apps on Flex Consumption Plan. | `number` | `2048` | no |
| ip\_restriction\_headers | IP restriction headers for Function. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#headers). | <pre>object({ x_azure_fdid = optional(list(string)) x_fd_health_probe = optional(list(string)) x_forwarded_for = optional(list(string)) x_forwarded_host = optional(list(string)) })</pre> | `null` | no |
| key\_vault\_reference\_identity\_id | The identity ID to use for Key Vault references. If not set, the Function App's system assigned identity will be used. | `string` | `null` | no |
| location | Azure location for Function App and related resources. | `string` | n/a | yes |
| location\_short | Short string for Azure location. | `string` | n/a | yes |
| logs\_categories | Log categories to send to destinations. | `list(string)` | `null` | no |
| logs\_destinations\_ids | List of destination resources IDs for logs diagnostic destination. Can be `Storage Account`, `Log Analytics Workspace` and `Event Hub`. No more than one of each can be set. If you want to use Azure EventHub as a destination, you must provide a formatted string containing both the EventHub Namespace authorization send ID and the EventHub name (name of the queue to use in the Namespace) separated by the <code>&#124;</code> character. | `list(string)` | n/a | yes |
| logs\_metrics\_categories | Metrics categories to send to destinations. | `list(string)` | `null` | no |
| maximum\_elastic\_worker\_count | Maximum number of workers to use in an Elastic SKU Plan. Cannot be set unless using an Elastic SKU. | `number` | `null` | no |
| maximum\_instance\_count | The maximum number of instances for this Function App. Only affects apps on Flex Consumption Plan. | `number` | `100` | no |
| mount\_points | Storage Account mount points. Name is generated if not set and default type is `AzureFiles`. | <pre>list(object({ name = optional(string) type = optional(string, "AzureFiles") account_name = string share_name = string access_key = string mount_path = optional(string) }))</pre> | `[]` | no |
| name\_prefix | Optional prefix for the generated name. | `string` | `""` | no |
| name\_suffix | Optional suffix for the generated name. | `string` | `""` | no |
| os\_type | OS type for the Functions to be hosted in the Service Plan. Possible values include `Linux` or `Windows`. | `string` | n/a | yes |
| per\_site\_scaling\_enabled | Should per site scaling be enabled on the Service Plan. | `bool` | `false` | no |
| public\_network\_access\_enabled | Whether public network access is allowed for the Function App. | `bool` | `true` | no |
| rbac\_storage\_blob\_role\_principal\_ids | The principal IDs of the users, groups, and service principals to assign the `Storage Blob Data *` different roles to if Blob containers are created. | <pre>object({ owners = optional(list(string), []) contributors = optional(list(string), []) readers = optional(list(string), []) })</pre> | `{}` | no |
| rbac\_storage\_contributor\_role\_principal\_ids | The principal IDs of the users, groups, and service principals to assign the `Storage Account Contributor` role to. | `list(string)` | `[]` | no |
| rbac\_storage\_file\_role\_principal\_ids | The principal IDs of the users, groups, and service principals to assign the `Storage File Data *` different roles to if File Shares are created. | <pre>object({ privileged_contributors = optional(list(string), []) privileged_readers = optional(list(string), []) smb_owners = optional(list(string), []) smb_contributors = optional(list(string), []) smb_readers = optional(list(string), []) })</pre> | `{}` | no |
| rbac\_storage\_queue\_contributor\_role\_principal\_ids | The principal IDs of the users, groups, and service principals to assign the `Storage Queue Data *` role to. | <pre>object({ contributors = optional(list(string), []) readers = optional(list(string), []) })</pre> | `{}` | no |
| rbac\_storage\_table\_role\_principal\_ids | The principal IDs of the users, groups, and service principals to assign the `Storage Table Data *` role to. | <pre>object({ contributors = optional(list(string), []) readers = optional(list(string), []) })</pre> | `{}` | no |
| resource\_group\_name | Resource group name. | `string` | n/a | yes |
| runtime\_name | The runtime name for the Function App. Possible values include `dotnet`, `dotnet-isolated`, `java`, `node`, `powershell`, `python`, and `custom`. Only affects apps on Flex Consumption Plan. | `string` | `"dotnet-isolated"` | no |
| runtime\_version | The runtime version for the Function App. Only affects apps on Flex Consumption Plan. | `string` | `"8.0"` | no |
| scm\_allowed\_ips | SCM IP restriction for Function App. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction). | `list(string)` | `[]` | no |
| scm\_allowed\_service\_tags | SCM Service Tags restriction for Function App. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction). | `list(string)` | `[]` | no |
| scm\_allowed\_subnet\_ids | SCM subnet restriction for Function App. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction). | `list(string)` | `[]` | no |
| scm\_ip\_restriction\_headers | IP restriction headers for Function App. [See documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction). | <pre>object({ x_azure_fdid = optional(list(string)) x_fd_health_probe = optional(list(string)) x_forwarded_for = optional(list(string)) x_forwarded_host = optional(list(string)) })</pre> | `null` | no |
| service\_plan | Existing Service Plan to use instead of creating a new one. Set `id` to the existing Service Plan resource ID. Leave `null` to create a new Service Plan. | <pre>object({ id = string })</pre> | `null` | no |
| service\_plan\_custom\_name | Name of the App Service Plan, generated if not set. | `string` | `""` | no |
| service\_plan\_extra\_tags | Extra tags to add to Service Plan. | `map(string)` | `{}` | no |
| site\_config | Site config for Function App. [See documentation](https://www.terraform.io/docs/providers/azurerm/r/app_service.html#site_config). IP restriction attribute is not managed in this block. | `any` | `{}` | no |
| sku\_name | The SKU for the Service Plan. Possible values include B1, B2, B3, D1, F1, I1, I2, I3, I1v2, I1mv2, I2v2, I2mv2, I3v2, I3mv2, I4v2, I4mv2, I5v2, I5mv2, I6v2, P1v2, P2v2, P3v2, P0v3, P1v3, P2v3, P3v3, P1mv3, P2mv3, P3mv3, P4mv3, P5mv3, P0v4, P1v4, P2v4, P3v4, P1mv4, P2mv4, P3mv4, P4mv4, P5mv4, S1, S2, S3, SHARED, EP1, EP2, EP3, FC1, WS1, WS2, WS3 and Y1. | `string` | `"Y1"` | no |
| stack | Project stack name. | `string` | n/a | yes |
| staging\_slot\_custom\_application\_settings | Override staging slot with custom application settings. | `map(string)` | `null` | no |
| staging\_slot\_custom\_name | Custom name of the Function App slot. | `string` | `"staging-slot"` | no |
| staging\_slot\_enabled | Create a staging slot alongside the Function App for blue/green deployment purposes. | `bool` | `false` | no |
| staging\_slot\_mount\_points | Storage Account mount points for staging slot. Name is generated if not set and default type is `AzureFiles`. | <pre>list(object({ name = optional(string) type = optional(string, "AzureFiles") account_name = string share_name = string access_key = string mount_path = optional(string) }))</pre> | `[]` | no |
| sticky\_settings | Lists of connection strings and app settings to prevent from swapping between slots. | <pre>object({ app_setting_names = optional(list(string)) connection_string_names = optional(list(string)) })</pre> | `null` | no |
| storage\_account\_advanced\_threat\_protection\_enabled | Whether advanced threat protection is enabled. [See documentation](https://docs.microsoft.com/en-us/azure/storage/common/storage-advanced-threat-protection?tabs=azure-portal). | `bool` | `false` | no |
| storage\_account\_allowed\_ips | IPs restrictions for Function Storage Account in CIDR format. | `list(string)` | `[]` | no |
| storage\_account\_custom\_name | Custom name of the Storage account to attach to function. | `string` | `null` | no |
| storage\_account\_extra\_tags | Extra tags to add to Storage Account. | `map(string)` | `{}` | no |
| storage\_account\_https\_traffic\_only\_enabled | Whether HTTPS traffic only is enabled for Storage Account. | `bool` | `true` | no |
| storage\_account\_id | ID of the existing Storage Account to use. | `string` | `null` | no |
| storage\_account\_identity\_ids | Specifies a list of User Assigned Managed Identity IDs to be assigned to the Storage Account. | `list(string)` | `null` | no |
| storage\_account\_identity\_type | Type of Managed Service Identity that should be configured on the Storage Account. | `string` | `null` | no |
| storage\_account\_infrastructure\_encryption\_enabled | Boolean flag which enables infrastructure encryption. Please refer to the [documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_account#infrastructure_encryption_enabled) for more information. | `bool` | `false` | no |
| storage\_account\_kind | Storage Account kind. | `string` | `"StorageV2"` | no |
| storage\_account\_min\_tls\_version | Storage Account minimal TLS version. | `string` | `"TLS1_2"` | no |
| storage\_account\_name\_prefix | Storage Account name prefix. | `string` | `""` | no |
| storage\_account\_network\_bypass | Whether traffic is bypassed for Logging/Metrics/AzureServices. Valid options are any combination of `Logging`, `Metrics`, `AzureServices`, or `None`. | `list(string)` | <pre>[ "Logging", "Metrics", "AzureServices" ]</pre> | no |
| storage\_account\_network\_rules\_enabled | Whether to enable Function Storage Account network default rules. | `bool` | `true` | no |
| storage\_logs\_categories | Override storage\_logs\_categories for the storage. Log categories to send to destinations. | `list(string)` | `null` | no |
| storage\_logs\_destinations\_ids | Override logs\_destinations\_ids for the storage. List of destination resources IDs for logs diagnostic destination used. Can be `Storage Account`, `Log Analytics Workspace` and `Event Hub`. No more than one of each can be set. If you want to use Azure EventHub as a destination, you must provide a formatted string containing both the EventHub Namespace authorization send ID and the EventHub name (name of the queue to use in the Namespace) separated by the <code>&#124;</code> character. | `list(string)` | `null` | no |
| storage\_logs\_metrics\_categories | Override storage\_logs\_metrics\_categories for the storage. Metrics categories to send to destinations. | `list(string)` | `null` | no |
| storage\_user\_assigned\_identity\_id | The user assigned Managed Identity to access the storage account. Only affects apps on Flex Consumption Plan. | `string` | `null` | no |
| storage\_uses\_managed\_identity | Whether the Function App use Managed Identity to access the Storage Account. **Caution** This disable the storage keys on the Storage Account if created within the module. | `bool` | `false` | no |
| use\_existing\_application\_insights | Whether existing Application Insights should be used instead of creating a new one. | `bool` | `false` | no |
| use\_existing\_storage\_account | Whether existing Storage Account should be used instead of creating a new one. | `bool` | `false` | no |
| vnet\_integration\_subnet\_id | ID of the subnet to associate with the Function App (Virtual Network integration). | `string` | `null` | no |
| worker\_count | Number of Workers (instances) to be allocated. | `number` | `null` | no |
| zone\_balancing\_enabled | Should the Service Plan balance across Availability Zones in the region. Defaults to `false` because the default SKU `Y1` for the App Service Plan cannot use this feature. | `bool` | `false` | no |

## Outputs

| Name | Description |
| ---- | ----------- |
| application\_insights\_app\_id | App ID of the associated Application Insights. |
| application\_insights\_application\_type | Application Type of the associated Application Insights. |
| application\_insights\_id | ID of the associated Application Insights. |
| application\_insights\_instrumentation\_key | Instrumentation key of the associated Application Insights. |
| application\_insights\_name | Name of the associated Application Insights. |
| connection\_string | Connection string of the created Function App. |
| default\_hostname | Default hostname of the created Function App. |
| id | ID of the created Function App. |
| identity\_principal\_id | Identity principal ID output of the Function App. |
| module\_diagnostics | Diagnostic Settings module object. |
| module\_service\_plan | Service Plan module object. `null` when using an existing Service Plan. |
| module\_storage\_account | Storage Account module object. |
| name | Name of the created Function App. |
| outbound\_ip\_addresses | Outbound IP adresses of the created Function App. |
| possible\_outbound\_ip\_addresses | All possible outbound IP adresses of the created Function App. |
| resource | Function App resource object. |
| resource\_application\_insights | Application Insights resource object. |
| resource\_slot | Function App staging slot resource object. |
| service\_plan\_id | ID of the Service Plan (created or existing). |
| service\_plan\_name | Name of the Service Plan (created or existing). |
| slot\_default\_hostname | Default hostname of the Function App slot. |
| slot\_id | ID of the Function App slot. |
| slot\_identity\_principal\_id | Identity block output of the Function App slot. |
| slot\_name | Name of the Function App slot. |
| slot\_outbound\_ip\_addresses | Outbound IP adresses of the created Function App slot. |
| slot\_possible\_outbound\_ip\_addresses | All possible outbound IP adresses of the created Function App slot. |
| storage\_account\_id | Storage Account ID. |
| storage\_account\_name | Storage Account name. |
| storage\_account\_network\_rules | Storage Account associated network rules. |
| storage\_account\_primary\_access\_key | Storage Account primary access key. |
| storage\_account\_primary\_connection\_string | Storage Account primary connection string. |
| storage\_account\_secondary\_access\_key | Storage Account secondary access key. |
| storage\_account\_secondary\_connection\_string | Storage Account secondary connection string. |

## Related documentation

Microsoft Azure Functions documentation: [github.com/Azure/Azure-Functions#documentation-1](https://github.com/Azure/Azure-Functions#documentation-1)

terraform-azurerm-function-app

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README