env |
string |
Yes |
Environment name (e.g., dev, prd) |
suffix |
string |
Yes |
Suffix for resource naming |
location |
string |
Yes |
Location for all resources |
tags |
object |
Yes |
Tags to apply to all resources |
zones |
array |
No
[ ] |
Availability zones for the Application Gateway |
userAssignedIdentityResourceId |
string |
Yes |
User assigned identity resource ID |
subnetResourceId |
string |
Yes |
Subnet resource ID for the Application Gateway |
keyVaultSecretId |
string |
Yes |
Key Vault secret ID for SSL certificate |
backendFqdns |
array |
Yes |
Backend FQDNs for the Application Gateway |
backendHostName |
string |
No
'' |
Backend host name for the Application Gateway |
appgwName |
string |
No
format('appgw-{0}-{1}', env, suffix) |
Application Gateway name |
publicIpName |
string |
No
format('appgw-public-ip-{0}-{1}', env, suffix) |
Public IP name |
skuConfig |
object |
No
{ name: 'Standard_v2' tier: 'Standard_v2' family: 'Generation_1' capacity: 1 } |
SKU configuration for Application Gateway |
frontendConfig |
object |
No
{ port: 443 protocol: 'Https' } |
Frontend configuration |
backendConfig |
object |
No
{ port: 443 protocol: 'Https' requestTimeout: 30 cookieBasedAffinity: 'Disabled' pickHostNameFromBackendAddress: if(empty(backendHostName), true(), false()) hostName: if(empty(backendHostName), null(), backendHostName) } |
Backend configuration |
healthProbeConfig |
object |
No
{ path: '/health/' interval: 30 timeout: 30 unhealthyThreshold: 3 minServers: 0 statusCodes: [ '200-399' ] } |
Health probe configuration |
sslConfig |
object |
No
{ name: 'appgw-ssl-cert' } |
SSL certificate configuration |
rewriteConfig |
object |
No
{ enabled: true headerName: 'X-Forwarded-For' headerValue: '' } |
Rewrite rule configuration |
usePrivateIp |
bool |
No
false |
Use private IP for the Application Gateway |
privateIPAllocationMethod |
string |
No
'Dynamic' |
Private IP allocation method |
privateIPAddress |
string |
No
'' |
Private IP address |
useWaf |
bool |
No
false |
Use Web Application Firewall |
firewallPolicyResourceId |
string |
No
'' |
Firewall policy resource ID |
useDiagnosticSettings |
bool |
No
false |
Use diagnostic settings |
logAnalyticsWorkspaceId |
string |
No
'' |
Log Analytics workspace ID |
ApplicationGatewayAccessLogEnabled |
bool |
No
true |
Application Gateway access log enabled |
ApplicationGatewayFirewallLogEnabled |
bool |
No
true |
Application Gateway firewall log enabled |