We recommend using Azure Native.
azure.appservice.LinuxFunctionAppSlot
Explore with Pulumi AI
Manages a Linux Function App Slot.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const exampleAccount = new azure.storage.Account("example", {
    name: "linuxfunctionappsa",
    resourceGroupName: example.name,
    location: example.location,
    accountTier: "Standard",
    accountReplicationType: "LRS",
});
const exampleServicePlan = new azure.appservice.ServicePlan("example", {
    name: "example-app-service-plan",
    resourceGroupName: example.name,
    location: example.location,
    osType: "Linux",
    skuName: "Y1",
});
const exampleLinuxFunctionApp = new azure.appservice.LinuxFunctionApp("example", {
    name: "example-linux-function-app",
    resourceGroupName: example.name,
    location: example.location,
    servicePlanId: exampleServicePlan.id,
    storageAccountName: exampleAccount.name,
    siteConfig: {},
});
const exampleLinuxFunctionAppSlot = new azure.appservice.LinuxFunctionAppSlot("example", {
    name: "example-linux-function-app-slot",
    functionAppId: exampleLinuxFunctionApp.id,
    storageAccountName: exampleAccount.name,
    siteConfig: {},
});
import pulumi
import pulumi_azure as azure
example = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
example_account = azure.storage.Account("example",
    name="linuxfunctionappsa",
    resource_group_name=example.name,
    location=example.location,
    account_tier="Standard",
    account_replication_type="LRS")
example_service_plan = azure.appservice.ServicePlan("example",
    name="example-app-service-plan",
    resource_group_name=example.name,
    location=example.location,
    os_type="Linux",
    sku_name="Y1")
example_linux_function_app = azure.appservice.LinuxFunctionApp("example",
    name="example-linux-function-app",
    resource_group_name=example.name,
    location=example.location,
    service_plan_id=example_service_plan.id,
    storage_account_name=example_account.name,
    site_config={})
example_linux_function_app_slot = azure.appservice.LinuxFunctionAppSlot("example",
    name="example-linux-function-app-slot",
    function_app_id=example_linux_function_app.id,
    storage_account_name=example_account.name,
    site_config={})
package main
import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/appservice"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/storage"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAccount, err := storage.NewAccount(ctx, "example", &storage.AccountArgs{
			Name:                   pulumi.String("linuxfunctionappsa"),
			ResourceGroupName:      example.Name,
			Location:               example.Location,
			AccountTier:            pulumi.String("Standard"),
			AccountReplicationType: pulumi.String("LRS"),
		})
		if err != nil {
			return err
		}
		exampleServicePlan, err := appservice.NewServicePlan(ctx, "example", &appservice.ServicePlanArgs{
			Name:              pulumi.String("example-app-service-plan"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
			OsType:            pulumi.String("Linux"),
			SkuName:           pulumi.String("Y1"),
		})
		if err != nil {
			return err
		}
		exampleLinuxFunctionApp, err := appservice.NewLinuxFunctionApp(ctx, "example", &appservice.LinuxFunctionAppArgs{
			Name:               pulumi.String("example-linux-function-app"),
			ResourceGroupName:  example.Name,
			Location:           example.Location,
			ServicePlanId:      exampleServicePlan.ID(),
			StorageAccountName: exampleAccount.Name,
			SiteConfig:         &appservice.LinuxFunctionAppSiteConfigArgs{},
		})
		if err != nil {
			return err
		}
		_, err = appservice.NewLinuxFunctionAppSlot(ctx, "example", &appservice.LinuxFunctionAppSlotArgs{
			Name:               pulumi.String("example-linux-function-app-slot"),
			FunctionAppId:      exampleLinuxFunctionApp.ID(),
			StorageAccountName: exampleAccount.Name,
			SiteConfig:         &appservice.LinuxFunctionAppSlotSiteConfigArgs{},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });
    var exampleAccount = new Azure.Storage.Account("example", new()
    {
        Name = "linuxfunctionappsa",
        ResourceGroupName = example.Name,
        Location = example.Location,
        AccountTier = "Standard",
        AccountReplicationType = "LRS",
    });
    var exampleServicePlan = new Azure.AppService.ServicePlan("example", new()
    {
        Name = "example-app-service-plan",
        ResourceGroupName = example.Name,
        Location = example.Location,
        OsType = "Linux",
        SkuName = "Y1",
    });
    var exampleLinuxFunctionApp = new Azure.AppService.LinuxFunctionApp("example", new()
    {
        Name = "example-linux-function-app",
        ResourceGroupName = example.Name,
        Location = example.Location,
        ServicePlanId = exampleServicePlan.Id,
        StorageAccountName = exampleAccount.Name,
        SiteConfig = null,
    });
    var exampleLinuxFunctionAppSlot = new Azure.AppService.LinuxFunctionAppSlot("example", new()
    {
        Name = "example-linux-function-app-slot",
        FunctionAppId = exampleLinuxFunctionApp.Id,
        StorageAccountName = exampleAccount.Name,
        SiteConfig = null,
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.storage.Account;
import com.pulumi.azure.storage.AccountArgs;
import com.pulumi.azure.appservice.ServicePlan;
import com.pulumi.azure.appservice.ServicePlanArgs;
import com.pulumi.azure.appservice.LinuxFunctionApp;
import com.pulumi.azure.appservice.LinuxFunctionAppArgs;
import com.pulumi.azure.appservice.inputs.LinuxFunctionAppSiteConfigArgs;
import com.pulumi.azure.appservice.LinuxFunctionAppSlot;
import com.pulumi.azure.appservice.LinuxFunctionAppSlotArgs;
import com.pulumi.azure.appservice.inputs.LinuxFunctionAppSlotSiteConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());
        var exampleAccount = new Account("exampleAccount", AccountArgs.builder()
            .name("linuxfunctionappsa")
            .resourceGroupName(example.name())
            .location(example.location())
            .accountTier("Standard")
            .accountReplicationType("LRS")
            .build());
        var exampleServicePlan = new ServicePlan("exampleServicePlan", ServicePlanArgs.builder()
            .name("example-app-service-plan")
            .resourceGroupName(example.name())
            .location(example.location())
            .osType("Linux")
            .skuName("Y1")
            .build());
        var exampleLinuxFunctionApp = new LinuxFunctionApp("exampleLinuxFunctionApp", LinuxFunctionAppArgs.builder()
            .name("example-linux-function-app")
            .resourceGroupName(example.name())
            .location(example.location())
            .servicePlanId(exampleServicePlan.id())
            .storageAccountName(exampleAccount.name())
            .siteConfig()
            .build());
        var exampleLinuxFunctionAppSlot = new LinuxFunctionAppSlot("exampleLinuxFunctionAppSlot", LinuxFunctionAppSlotArgs.builder()
            .name("example-linux-function-app-slot")
            .functionAppId(exampleLinuxFunctionApp.id())
            .storageAccountName(exampleAccount.name())
            .siteConfig()
            .build());
    }
}
resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resources
      location: West Europe
  exampleAccount:
    type: azure:storage:Account
    name: example
    properties:
      name: linuxfunctionappsa
      resourceGroupName: ${example.name}
      location: ${example.location}
      accountTier: Standard
      accountReplicationType: LRS
  exampleServicePlan:
    type: azure:appservice:ServicePlan
    name: example
    properties:
      name: example-app-service-plan
      resourceGroupName: ${example.name}
      location: ${example.location}
      osType: Linux
      skuName: Y1
  exampleLinuxFunctionApp:
    type: azure:appservice:LinuxFunctionApp
    name: example
    properties:
      name: example-linux-function-app
      resourceGroupName: ${example.name}
      location: ${example.location}
      servicePlanId: ${exampleServicePlan.id}
      storageAccountName: ${exampleAccount.name}
      siteConfig: {}
  exampleLinuxFunctionAppSlot:
    type: azure:appservice:LinuxFunctionAppSlot
    name: example
    properties:
      name: example-linux-function-app-slot
      functionAppId: ${exampleLinuxFunctionApp.id}
      storageAccountName: ${exampleAccount.name}
      siteConfig: {}
Create LinuxFunctionAppSlot Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new LinuxFunctionAppSlot(name: string, args: LinuxFunctionAppSlotArgs, opts?: CustomResourceOptions);@overload
def LinuxFunctionAppSlot(resource_name: str,
                         args: LinuxFunctionAppSlotArgs,
                         opts: Optional[ResourceOptions] = None)
@overload
def LinuxFunctionAppSlot(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         function_app_id: Optional[str] = None,
                         site_config: Optional[LinuxFunctionAppSlotSiteConfigArgs] = None,
                         client_certificate_mode: Optional[str] = None,
                         client_certificate_exclusion_paths: Optional[str] = None,
                         identity: Optional[LinuxFunctionAppSlotIdentityArgs] = None,
                         client_certificate_enabled: Optional[bool] = None,
                         key_vault_reference_identity_id: Optional[str] = None,
                         app_settings: Optional[Mapping[str, str]] = None,
                         connection_strings: Optional[Sequence[LinuxFunctionAppSlotConnectionStringArgs]] = None,
                         content_share_force_disabled: Optional[bool] = None,
                         daily_memory_time_quota: Optional[int] = None,
                         enabled: Optional[bool] = None,
                         ftp_publish_basic_authentication_enabled: Optional[bool] = None,
                         name: Optional[str] = None,
                         functions_extension_version: Optional[str] = None,
                         https_only: Optional[bool] = None,
                         builtin_logging_enabled: Optional[bool] = None,
                         backup: Optional[LinuxFunctionAppSlotBackupArgs] = None,
                         auth_settings_v2: Optional[LinuxFunctionAppSlotAuthSettingsV2Args] = None,
                         public_network_access_enabled: Optional[bool] = None,
                         service_plan_id: Optional[str] = None,
                         auth_settings: Optional[LinuxFunctionAppSlotAuthSettingsArgs] = None,
                         storage_account_access_key: Optional[str] = None,
                         storage_account_name: Optional[str] = None,
                         storage_accounts: Optional[Sequence[LinuxFunctionAppSlotStorageAccountArgs]] = None,
                         storage_key_vault_secret_id: Optional[str] = None,
                         storage_uses_managed_identity: Optional[bool] = None,
                         tags: Optional[Mapping[str, str]] = None,
                         virtual_network_subnet_id: Optional[str] = None,
                         vnet_image_pull_enabled: Optional[bool] = None,
                         webdeploy_publish_basic_authentication_enabled: Optional[bool] = None)func NewLinuxFunctionAppSlot(ctx *Context, name string, args LinuxFunctionAppSlotArgs, opts ...ResourceOption) (*LinuxFunctionAppSlot, error)public LinuxFunctionAppSlot(string name, LinuxFunctionAppSlotArgs args, CustomResourceOptions? opts = null)
public LinuxFunctionAppSlot(String name, LinuxFunctionAppSlotArgs args)
public LinuxFunctionAppSlot(String name, LinuxFunctionAppSlotArgs args, CustomResourceOptions options)
type: azure:appservice:LinuxFunctionAppSlot
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args LinuxFunctionAppSlotArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args LinuxFunctionAppSlotArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args LinuxFunctionAppSlotArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args LinuxFunctionAppSlotArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args LinuxFunctionAppSlotArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var linuxFunctionAppSlotResource = new Azure.AppService.LinuxFunctionAppSlot("linuxFunctionAppSlotResource", new()
{
    FunctionAppId = "string",
    SiteConfig = new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigArgs
    {
        AlwaysOn = false,
        ApiDefinitionUrl = "string",
        ApiManagementApiId = "string",
        AppCommandLine = "string",
        AppScaleLimit = 0,
        AppServiceLogs = new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigAppServiceLogsArgs
        {
            DiskQuotaMb = 0,
            RetentionPeriodDays = 0,
        },
        ApplicationInsightsConnectionString = "string",
        ApplicationInsightsKey = "string",
        ApplicationStack = new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigApplicationStackArgs
        {
            Dockers = new[]
            {
                new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigApplicationStackDockerArgs
                {
                    ImageName = "string",
                    ImageTag = "string",
                    RegistryUrl = "string",
                    RegistryPassword = "string",
                    RegistryUsername = "string",
                },
            },
            DotnetVersion = "string",
            JavaVersion = "string",
            NodeVersion = "string",
            PowershellCoreVersion = "string",
            PythonVersion = "string",
            UseCustomRuntime = false,
            UseDotnetIsolatedRuntime = false,
        },
        AutoSwapSlotName = "string",
        ContainerRegistryManagedIdentityClientId = "string",
        ContainerRegistryUseManagedIdentity = false,
        Cors = new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigCorsArgs
        {
            AllowedOrigins = new[]
            {
                "string",
            },
            SupportCredentials = false,
        },
        DefaultDocuments = new[]
        {
            "string",
        },
        DetailedErrorLoggingEnabled = false,
        ElasticInstanceMinimum = 0,
        FtpsState = "string",
        HealthCheckEvictionTimeInMin = 0,
        HealthCheckPath = "string",
        Http2Enabled = false,
        IpRestrictionDefaultAction = "string",
        IpRestrictions = new[]
        {
            new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigIpRestrictionArgs
            {
                Action = "string",
                Description = "string",
                Headers = new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigIpRestrictionHeadersArgs
                {
                    XAzureFdids = new[]
                    {
                        "string",
                    },
                    XFdHealthProbe = "string",
                    XForwardedFors = new[]
                    {
                        "string",
                    },
                    XForwardedHosts = new[]
                    {
                        "string",
                    },
                },
                IpAddress = "string",
                Name = "string",
                Priority = 0,
                ServiceTag = "string",
                VirtualNetworkSubnetId = "string",
            },
        },
        LinuxFxVersion = "string",
        LoadBalancingMode = "string",
        ManagedPipelineMode = "string",
        MinimumTlsVersion = "string",
        PreWarmedInstanceCount = 0,
        RemoteDebuggingEnabled = false,
        RemoteDebuggingVersion = "string",
        RuntimeScaleMonitoringEnabled = false,
        ScmIpRestrictionDefaultAction = "string",
        ScmIpRestrictions = new[]
        {
            new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigScmIpRestrictionArgs
            {
                Action = "string",
                Description = "string",
                Headers = new Azure.AppService.Inputs.LinuxFunctionAppSlotSiteConfigScmIpRestrictionHeadersArgs
                {
                    XAzureFdids = new[]
                    {
                        "string",
                    },
                    XFdHealthProbe = "string",
                    XForwardedFors = new[]
                    {
                        "string",
                    },
                    XForwardedHosts = new[]
                    {
                        "string",
                    },
                },
                IpAddress = "string",
                Name = "string",
                Priority = 0,
                ServiceTag = "string",
                VirtualNetworkSubnetId = "string",
            },
        },
        ScmMinimumTlsVersion = "string",
        ScmType = "string",
        ScmUseMainIpRestriction = false,
        Use32BitWorker = false,
        VnetRouteAllEnabled = false,
        WebsocketsEnabled = false,
        WorkerCount = 0,
    },
    ClientCertificateMode = "string",
    ClientCertificateExclusionPaths = "string",
    Identity = new Azure.AppService.Inputs.LinuxFunctionAppSlotIdentityArgs
    {
        Type = "string",
        IdentityIds = new[]
        {
            "string",
        },
        PrincipalId = "string",
        TenantId = "string",
    },
    ClientCertificateEnabled = false,
    KeyVaultReferenceIdentityId = "string",
    AppSettings = 
    {
        { "string", "string" },
    },
    ConnectionStrings = new[]
    {
        new Azure.AppService.Inputs.LinuxFunctionAppSlotConnectionStringArgs
        {
            Name = "string",
            Type = "string",
            Value = "string",
        },
    },
    ContentShareForceDisabled = false,
    DailyMemoryTimeQuota = 0,
    Enabled = false,
    FtpPublishBasicAuthenticationEnabled = false,
    Name = "string",
    FunctionsExtensionVersion = "string",
    HttpsOnly = false,
    BuiltinLoggingEnabled = false,
    Backup = new Azure.AppService.Inputs.LinuxFunctionAppSlotBackupArgs
    {
        Name = "string",
        Schedule = new Azure.AppService.Inputs.LinuxFunctionAppSlotBackupScheduleArgs
        {
            FrequencyInterval = 0,
            FrequencyUnit = "string",
            KeepAtLeastOneBackup = false,
            LastExecutionTime = "string",
            RetentionPeriodDays = 0,
            StartTime = "string",
        },
        StorageAccountUrl = "string",
        Enabled = false,
    },
    AuthSettingsV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2Args
    {
        Login = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2LoginArgs
        {
            AllowedExternalRedirectUrls = new[]
            {
                "string",
            },
            CookieExpirationConvention = "string",
            CookieExpirationTime = "string",
            LogoutEndpoint = "string",
            NonceExpirationTime = "string",
            PreserveUrlFragmentsForLogins = false,
            TokenRefreshExtensionTime = 0,
            TokenStoreEnabled = false,
            TokenStorePath = "string",
            TokenStoreSasSettingName = "string",
            ValidateNonce = false,
        },
        CustomOidcV2s = new[]
        {
            new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2Args
            {
                ClientId = "string",
                Name = "string",
                OpenidConfigurationEndpoint = "string",
                AuthorisationEndpoint = "string",
                CertificationUri = "string",
                ClientCredentialMethod = "string",
                ClientSecretSettingName = "string",
                IssuerEndpoint = "string",
                NameClaimType = "string",
                Scopes = new[]
                {
                    "string",
                },
                TokenEndpoint = "string",
            },
        },
        ActiveDirectoryV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2ActiveDirectoryV2Args
        {
            ClientId = "string",
            TenantAuthEndpoint = "string",
            AllowedApplications = new[]
            {
                "string",
            },
            AllowedAudiences = new[]
            {
                "string",
            },
            AllowedGroups = new[]
            {
                "string",
            },
            AllowedIdentities = new[]
            {
                "string",
            },
            ClientSecretCertificateThumbprint = "string",
            ClientSecretSettingName = "string",
            JwtAllowedClientApplications = new[]
            {
                "string",
            },
            JwtAllowedGroups = new[]
            {
                "string",
            },
            LoginParameters = 
            {
                { "string", "string" },
            },
            WwwAuthenticationDisabled = false,
        },
        ForwardProxyCustomSchemeHeaderName = "string",
        GoogleV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2GoogleV2Args
        {
            ClientId = "string",
            ClientSecretSettingName = "string",
            AllowedAudiences = new[]
            {
                "string",
            },
            LoginScopes = new[]
            {
                "string",
            },
        },
        GithubV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2GithubV2Args
        {
            ClientId = "string",
            ClientSecretSettingName = "string",
            LoginScopes = new[]
            {
                "string",
            },
        },
        DefaultProvider = "string",
        ExcludedPaths = new[]
        {
            "string",
        },
        FacebookV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2FacebookV2Args
        {
            AppId = "string",
            AppSecretSettingName = "string",
            GraphApiVersion = "string",
            LoginScopes = new[]
            {
                "string",
            },
        },
        ForwardProxyConvention = "string",
        ForwardProxyCustomHostHeaderName = "string",
        AzureStaticWebAppV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2Args
        {
            ClientId = "string",
        },
        AuthEnabled = false,
        ConfigFilePath = "string",
        HttpRouteApiPrefix = "string",
        AppleV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2AppleV2Args
        {
            ClientId = "string",
            ClientSecretSettingName = "string",
            LoginScopes = new[]
            {
                "string",
            },
        },
        MicrosoftV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2Args
        {
            ClientId = "string",
            ClientSecretSettingName = "string",
            AllowedAudiences = new[]
            {
                "string",
            },
            LoginScopes = new[]
            {
                "string",
            },
        },
        RequireAuthentication = false,
        RequireHttps = false,
        RuntimeVersion = "string",
        TwitterV2 = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsV2TwitterV2Args
        {
            ConsumerKey = "string",
            ConsumerSecretSettingName = "string",
        },
        UnauthenticatedAction = "string",
    },
    PublicNetworkAccessEnabled = false,
    ServicePlanId = "string",
    AuthSettings = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsArgs
    {
        Enabled = false,
        Github = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsGithubArgs
        {
            ClientId = "string",
            ClientSecret = "string",
            ClientSecretSettingName = "string",
            OauthScopes = new[]
            {
                "string",
            },
        },
        Issuer = "string",
        DefaultProvider = "string",
        AdditionalLoginParameters = 
        {
            { "string", "string" },
        },
        Facebook = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsFacebookArgs
        {
            AppId = "string",
            AppSecret = "string",
            AppSecretSettingName = "string",
            OauthScopes = new[]
            {
                "string",
            },
        },
        ActiveDirectory = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsActiveDirectoryArgs
        {
            ClientId = "string",
            AllowedAudiences = new[]
            {
                "string",
            },
            ClientSecret = "string",
            ClientSecretSettingName = "string",
        },
        Google = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsGoogleArgs
        {
            ClientId = "string",
            ClientSecret = "string",
            ClientSecretSettingName = "string",
            OauthScopes = new[]
            {
                "string",
            },
        },
        AllowedExternalRedirectUrls = new[]
        {
            "string",
        },
        Microsoft = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsMicrosoftArgs
        {
            ClientId = "string",
            ClientSecret = "string",
            ClientSecretSettingName = "string",
            OauthScopes = new[]
            {
                "string",
            },
        },
        RuntimeVersion = "string",
        TokenRefreshExtensionHours = 0,
        TokenStoreEnabled = false,
        Twitter = new Azure.AppService.Inputs.LinuxFunctionAppSlotAuthSettingsTwitterArgs
        {
            ConsumerKey = "string",
            ConsumerSecret = "string",
            ConsumerSecretSettingName = "string",
        },
        UnauthenticatedClientAction = "string",
    },
    StorageAccountAccessKey = "string",
    StorageAccountName = "string",
    StorageAccounts = new[]
    {
        new Azure.AppService.Inputs.LinuxFunctionAppSlotStorageAccountArgs
        {
            AccessKey = "string",
            AccountName = "string",
            Name = "string",
            ShareName = "string",
            Type = "string",
            MountPath = "string",
        },
    },
    StorageKeyVaultSecretId = "string",
    StorageUsesManagedIdentity = false,
    Tags = 
    {
        { "string", "string" },
    },
    VirtualNetworkSubnetId = "string",
    VnetImagePullEnabled = false,
    WebdeployPublishBasicAuthenticationEnabled = false,
});
example, err := appservice.NewLinuxFunctionAppSlot(ctx, "linuxFunctionAppSlotResource", &appservice.LinuxFunctionAppSlotArgs{
	FunctionAppId: pulumi.String("string"),
	SiteConfig: &appservice.LinuxFunctionAppSlotSiteConfigArgs{
		AlwaysOn:           pulumi.Bool(false),
		ApiDefinitionUrl:   pulumi.String("string"),
		ApiManagementApiId: pulumi.String("string"),
		AppCommandLine:     pulumi.String("string"),
		AppScaleLimit:      pulumi.Int(0),
		AppServiceLogs: &appservice.LinuxFunctionAppSlotSiteConfigAppServiceLogsArgs{
			DiskQuotaMb:         pulumi.Int(0),
			RetentionPeriodDays: pulumi.Int(0),
		},
		ApplicationInsightsConnectionString: pulumi.String("string"),
		ApplicationInsightsKey:              pulumi.String("string"),
		ApplicationStack: &appservice.LinuxFunctionAppSlotSiteConfigApplicationStackArgs{
			Dockers: appservice.LinuxFunctionAppSlotSiteConfigApplicationStackDockerArray{
				&appservice.LinuxFunctionAppSlotSiteConfigApplicationStackDockerArgs{
					ImageName:        pulumi.String("string"),
					ImageTag:         pulumi.String("string"),
					RegistryUrl:      pulumi.String("string"),
					RegistryPassword: pulumi.String("string"),
					RegistryUsername: pulumi.String("string"),
				},
			},
			DotnetVersion:            pulumi.String("string"),
			JavaVersion:              pulumi.String("string"),
			NodeVersion:              pulumi.String("string"),
			PowershellCoreVersion:    pulumi.String("string"),
			PythonVersion:            pulumi.String("string"),
			UseCustomRuntime:         pulumi.Bool(false),
			UseDotnetIsolatedRuntime: pulumi.Bool(false),
		},
		AutoSwapSlotName:                         pulumi.String("string"),
		ContainerRegistryManagedIdentityClientId: pulumi.String("string"),
		ContainerRegistryUseManagedIdentity:      pulumi.Bool(false),
		Cors: &appservice.LinuxFunctionAppSlotSiteConfigCorsArgs{
			AllowedOrigins: pulumi.StringArray{
				pulumi.String("string"),
			},
			SupportCredentials: pulumi.Bool(false),
		},
		DefaultDocuments: pulumi.StringArray{
			pulumi.String("string"),
		},
		DetailedErrorLoggingEnabled:  pulumi.Bool(false),
		ElasticInstanceMinimum:       pulumi.Int(0),
		FtpsState:                    pulumi.String("string"),
		HealthCheckEvictionTimeInMin: pulumi.Int(0),
		HealthCheckPath:              pulumi.String("string"),
		Http2Enabled:                 pulumi.Bool(false),
		IpRestrictionDefaultAction:   pulumi.String("string"),
		IpRestrictions: appservice.LinuxFunctionAppSlotSiteConfigIpRestrictionArray{
			&appservice.LinuxFunctionAppSlotSiteConfigIpRestrictionArgs{
				Action:      pulumi.String("string"),
				Description: pulumi.String("string"),
				Headers: &appservice.LinuxFunctionAppSlotSiteConfigIpRestrictionHeadersArgs{
					XAzureFdids: pulumi.StringArray{
						pulumi.String("string"),
					},
					XFdHealthProbe: pulumi.String("string"),
					XForwardedFors: pulumi.StringArray{
						pulumi.String("string"),
					},
					XForwardedHosts: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
				IpAddress:              pulumi.String("string"),
				Name:                   pulumi.String("string"),
				Priority:               pulumi.Int(0),
				ServiceTag:             pulumi.String("string"),
				VirtualNetworkSubnetId: pulumi.String("string"),
			},
		},
		LinuxFxVersion:                pulumi.String("string"),
		LoadBalancingMode:             pulumi.String("string"),
		ManagedPipelineMode:           pulumi.String("string"),
		MinimumTlsVersion:             pulumi.String("string"),
		PreWarmedInstanceCount:        pulumi.Int(0),
		RemoteDebuggingEnabled:        pulumi.Bool(false),
		RemoteDebuggingVersion:        pulumi.String("string"),
		RuntimeScaleMonitoringEnabled: pulumi.Bool(false),
		ScmIpRestrictionDefaultAction: pulumi.String("string"),
		ScmIpRestrictions: appservice.LinuxFunctionAppSlotSiteConfigScmIpRestrictionArray{
			&appservice.LinuxFunctionAppSlotSiteConfigScmIpRestrictionArgs{
				Action:      pulumi.String("string"),
				Description: pulumi.String("string"),
				Headers: &appservice.LinuxFunctionAppSlotSiteConfigScmIpRestrictionHeadersArgs{
					XAzureFdids: pulumi.StringArray{
						pulumi.String("string"),
					},
					XFdHealthProbe: pulumi.String("string"),
					XForwardedFors: pulumi.StringArray{
						pulumi.String("string"),
					},
					XForwardedHosts: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
				IpAddress:              pulumi.String("string"),
				Name:                   pulumi.String("string"),
				Priority:               pulumi.Int(0),
				ServiceTag:             pulumi.String("string"),
				VirtualNetworkSubnetId: pulumi.String("string"),
			},
		},
		ScmMinimumTlsVersion:    pulumi.String("string"),
		ScmType:                 pulumi.String("string"),
		ScmUseMainIpRestriction: pulumi.Bool(false),
		Use32BitWorker:          pulumi.Bool(false),
		VnetRouteAllEnabled:     pulumi.Bool(false),
		WebsocketsEnabled:       pulumi.Bool(false),
		WorkerCount:             pulumi.Int(0),
	},
	ClientCertificateMode:           pulumi.String("string"),
	ClientCertificateExclusionPaths: pulumi.String("string"),
	Identity: &appservice.LinuxFunctionAppSlotIdentityArgs{
		Type: pulumi.String("string"),
		IdentityIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		PrincipalId: pulumi.String("string"),
		TenantId:    pulumi.String("string"),
	},
	ClientCertificateEnabled:    pulumi.Bool(false),
	KeyVaultReferenceIdentityId: pulumi.String("string"),
	AppSettings: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	ConnectionStrings: appservice.LinuxFunctionAppSlotConnectionStringArray{
		&appservice.LinuxFunctionAppSlotConnectionStringArgs{
			Name:  pulumi.String("string"),
			Type:  pulumi.String("string"),
			Value: pulumi.String("string"),
		},
	},
	ContentShareForceDisabled:            pulumi.Bool(false),
	DailyMemoryTimeQuota:                 pulumi.Int(0),
	Enabled:                              pulumi.Bool(false),
	FtpPublishBasicAuthenticationEnabled: pulumi.Bool(false),
	Name:                                 pulumi.String("string"),
	FunctionsExtensionVersion:            pulumi.String("string"),
	HttpsOnly:                            pulumi.Bool(false),
	BuiltinLoggingEnabled:                pulumi.Bool(false),
	Backup: &appservice.LinuxFunctionAppSlotBackupArgs{
		Name: pulumi.String("string"),
		Schedule: &appservice.LinuxFunctionAppSlotBackupScheduleArgs{
			FrequencyInterval:    pulumi.Int(0),
			FrequencyUnit:        pulumi.String("string"),
			KeepAtLeastOneBackup: pulumi.Bool(false),
			LastExecutionTime:    pulumi.String("string"),
			RetentionPeriodDays:  pulumi.Int(0),
			StartTime:            pulumi.String("string"),
		},
		StorageAccountUrl: pulumi.String("string"),
		Enabled:           pulumi.Bool(false),
	},
	AuthSettingsV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2Args{
		Login: &appservice.LinuxFunctionAppSlotAuthSettingsV2LoginArgs{
			AllowedExternalRedirectUrls: pulumi.StringArray{
				pulumi.String("string"),
			},
			CookieExpirationConvention:    pulumi.String("string"),
			CookieExpirationTime:          pulumi.String("string"),
			LogoutEndpoint:                pulumi.String("string"),
			NonceExpirationTime:           pulumi.String("string"),
			PreserveUrlFragmentsForLogins: pulumi.Bool(false),
			TokenRefreshExtensionTime:     pulumi.Float64(0),
			TokenStoreEnabled:             pulumi.Bool(false),
			TokenStorePath:                pulumi.String("string"),
			TokenStoreSasSettingName:      pulumi.String("string"),
			ValidateNonce:                 pulumi.Bool(false),
		},
		CustomOidcV2s: appservice.LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2Array{
			&appservice.LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2Args{
				ClientId:                    pulumi.String("string"),
				Name:                        pulumi.String("string"),
				OpenidConfigurationEndpoint: pulumi.String("string"),
				AuthorisationEndpoint:       pulumi.String("string"),
				CertificationUri:            pulumi.String("string"),
				ClientCredentialMethod:      pulumi.String("string"),
				ClientSecretSettingName:     pulumi.String("string"),
				IssuerEndpoint:              pulumi.String("string"),
				NameClaimType:               pulumi.String("string"),
				Scopes: pulumi.StringArray{
					pulumi.String("string"),
				},
				TokenEndpoint: pulumi.String("string"),
			},
		},
		ActiveDirectoryV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2ActiveDirectoryV2Args{
			ClientId:           pulumi.String("string"),
			TenantAuthEndpoint: pulumi.String("string"),
			AllowedApplications: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedAudiences: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedGroups: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedIdentities: pulumi.StringArray{
				pulumi.String("string"),
			},
			ClientSecretCertificateThumbprint: pulumi.String("string"),
			ClientSecretSettingName:           pulumi.String("string"),
			JwtAllowedClientApplications: pulumi.StringArray{
				pulumi.String("string"),
			},
			JwtAllowedGroups: pulumi.StringArray{
				pulumi.String("string"),
			},
			LoginParameters: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			WwwAuthenticationDisabled: pulumi.Bool(false),
		},
		ForwardProxyCustomSchemeHeaderName: pulumi.String("string"),
		GoogleV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2GoogleV2Args{
			ClientId:                pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
			AllowedAudiences: pulumi.StringArray{
				pulumi.String("string"),
			},
			LoginScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		GithubV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2GithubV2Args{
			ClientId:                pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
			LoginScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		DefaultProvider: pulumi.String("string"),
		ExcludedPaths: pulumi.StringArray{
			pulumi.String("string"),
		},
		FacebookV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2FacebookV2Args{
			AppId:                pulumi.String("string"),
			AppSecretSettingName: pulumi.String("string"),
			GraphApiVersion:      pulumi.String("string"),
			LoginScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		ForwardProxyConvention:           pulumi.String("string"),
		ForwardProxyCustomHostHeaderName: pulumi.String("string"),
		AzureStaticWebAppV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2Args{
			ClientId: pulumi.String("string"),
		},
		AuthEnabled:        pulumi.Bool(false),
		ConfigFilePath:     pulumi.String("string"),
		HttpRouteApiPrefix: pulumi.String("string"),
		AppleV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2AppleV2Args{
			ClientId:                pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
			LoginScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		MicrosoftV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2Args{
			ClientId:                pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
			AllowedAudiences: pulumi.StringArray{
				pulumi.String("string"),
			},
			LoginScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		RequireAuthentication: pulumi.Bool(false),
		RequireHttps:          pulumi.Bool(false),
		RuntimeVersion:        pulumi.String("string"),
		TwitterV2: &appservice.LinuxFunctionAppSlotAuthSettingsV2TwitterV2Args{
			ConsumerKey:               pulumi.String("string"),
			ConsumerSecretSettingName: pulumi.String("string"),
		},
		UnauthenticatedAction: pulumi.String("string"),
	},
	PublicNetworkAccessEnabled: pulumi.Bool(false),
	ServicePlanId:              pulumi.String("string"),
	AuthSettings: &appservice.LinuxFunctionAppSlotAuthSettingsArgs{
		Enabled: pulumi.Bool(false),
		Github: &appservice.LinuxFunctionAppSlotAuthSettingsGithubArgs{
			ClientId:                pulumi.String("string"),
			ClientSecret:            pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
			OauthScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		Issuer:          pulumi.String("string"),
		DefaultProvider: pulumi.String("string"),
		AdditionalLoginParameters: pulumi.StringMap{
			"string": pulumi.String("string"),
		},
		Facebook: &appservice.LinuxFunctionAppSlotAuthSettingsFacebookArgs{
			AppId:                pulumi.String("string"),
			AppSecret:            pulumi.String("string"),
			AppSecretSettingName: pulumi.String("string"),
			OauthScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		ActiveDirectory: &appservice.LinuxFunctionAppSlotAuthSettingsActiveDirectoryArgs{
			ClientId: pulumi.String("string"),
			AllowedAudiences: pulumi.StringArray{
				pulumi.String("string"),
			},
			ClientSecret:            pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
		},
		Google: &appservice.LinuxFunctionAppSlotAuthSettingsGoogleArgs{
			ClientId:                pulumi.String("string"),
			ClientSecret:            pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
			OauthScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		AllowedExternalRedirectUrls: pulumi.StringArray{
			pulumi.String("string"),
		},
		Microsoft: &appservice.LinuxFunctionAppSlotAuthSettingsMicrosoftArgs{
			ClientId:                pulumi.String("string"),
			ClientSecret:            pulumi.String("string"),
			ClientSecretSettingName: pulumi.String("string"),
			OauthScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		RuntimeVersion:             pulumi.String("string"),
		TokenRefreshExtensionHours: pulumi.Float64(0),
		TokenStoreEnabled:          pulumi.Bool(false),
		Twitter: &appservice.LinuxFunctionAppSlotAuthSettingsTwitterArgs{
			ConsumerKey:               pulumi.String("string"),
			ConsumerSecret:            pulumi.String("string"),
			ConsumerSecretSettingName: pulumi.String("string"),
		},
		UnauthenticatedClientAction: pulumi.String("string"),
	},
	StorageAccountAccessKey: pulumi.String("string"),
	StorageAccountName:      pulumi.String("string"),
	StorageAccounts: appservice.LinuxFunctionAppSlotStorageAccountArray{
		&appservice.LinuxFunctionAppSlotStorageAccountArgs{
			AccessKey:   pulumi.String("string"),
			AccountName: pulumi.String("string"),
			Name:        pulumi.String("string"),
			ShareName:   pulumi.String("string"),
			Type:        pulumi.String("string"),
			MountPath:   pulumi.String("string"),
		},
	},
	StorageKeyVaultSecretId:    pulumi.String("string"),
	StorageUsesManagedIdentity: pulumi.Bool(false),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	VirtualNetworkSubnetId:                     pulumi.String("string"),
	VnetImagePullEnabled:                       pulumi.Bool(false),
	WebdeployPublishBasicAuthenticationEnabled: pulumi.Bool(false),
})
var linuxFunctionAppSlotResource = new LinuxFunctionAppSlot("linuxFunctionAppSlotResource", LinuxFunctionAppSlotArgs.builder()
    .functionAppId("string")
    .siteConfig(LinuxFunctionAppSlotSiteConfigArgs.builder()
        .alwaysOn(false)
        .apiDefinitionUrl("string")
        .apiManagementApiId("string")
        .appCommandLine("string")
        .appScaleLimit(0)
        .appServiceLogs(LinuxFunctionAppSlotSiteConfigAppServiceLogsArgs.builder()
            .diskQuotaMb(0)
            .retentionPeriodDays(0)
            .build())
        .applicationInsightsConnectionString("string")
        .applicationInsightsKey("string")
        .applicationStack(LinuxFunctionAppSlotSiteConfigApplicationStackArgs.builder()
            .dockers(LinuxFunctionAppSlotSiteConfigApplicationStackDockerArgs.builder()
                .imageName("string")
                .imageTag("string")
                .registryUrl("string")
                .registryPassword("string")
                .registryUsername("string")
                .build())
            .dotnetVersion("string")
            .javaVersion("string")
            .nodeVersion("string")
            .powershellCoreVersion("string")
            .pythonVersion("string")
            .useCustomRuntime(false)
            .useDotnetIsolatedRuntime(false)
            .build())
        .autoSwapSlotName("string")
        .containerRegistryManagedIdentityClientId("string")
        .containerRegistryUseManagedIdentity(false)
        .cors(LinuxFunctionAppSlotSiteConfigCorsArgs.builder()
            .allowedOrigins("string")
            .supportCredentials(false)
            .build())
        .defaultDocuments("string")
        .detailedErrorLoggingEnabled(false)
        .elasticInstanceMinimum(0)
        .ftpsState("string")
        .healthCheckEvictionTimeInMin(0)
        .healthCheckPath("string")
        .http2Enabled(false)
        .ipRestrictionDefaultAction("string")
        .ipRestrictions(LinuxFunctionAppSlotSiteConfigIpRestrictionArgs.builder()
            .action("string")
            .description("string")
            .headers(LinuxFunctionAppSlotSiteConfigIpRestrictionHeadersArgs.builder()
                .xAzureFdids("string")
                .xFdHealthProbe("string")
                .xForwardedFors("string")
                .xForwardedHosts("string")
                .build())
            .ipAddress("string")
            .name("string")
            .priority(0)
            .serviceTag("string")
            .virtualNetworkSubnetId("string")
            .build())
        .linuxFxVersion("string")
        .loadBalancingMode("string")
        .managedPipelineMode("string")
        .minimumTlsVersion("string")
        .preWarmedInstanceCount(0)
        .remoteDebuggingEnabled(false)
        .remoteDebuggingVersion("string")
        .runtimeScaleMonitoringEnabled(false)
        .scmIpRestrictionDefaultAction("string")
        .scmIpRestrictions(LinuxFunctionAppSlotSiteConfigScmIpRestrictionArgs.builder()
            .action("string")
            .description("string")
            .headers(LinuxFunctionAppSlotSiteConfigScmIpRestrictionHeadersArgs.builder()
                .xAzureFdids("string")
                .xFdHealthProbe("string")
                .xForwardedFors("string")
                .xForwardedHosts("string")
                .build())
            .ipAddress("string")
            .name("string")
            .priority(0)
            .serviceTag("string")
            .virtualNetworkSubnetId("string")
            .build())
        .scmMinimumTlsVersion("string")
        .scmType("string")
        .scmUseMainIpRestriction(false)
        .use32BitWorker(false)
        .vnetRouteAllEnabled(false)
        .websocketsEnabled(false)
        .workerCount(0)
        .build())
    .clientCertificateMode("string")
    .clientCertificateExclusionPaths("string")
    .identity(LinuxFunctionAppSlotIdentityArgs.builder()
        .type("string")
        .identityIds("string")
        .principalId("string")
        .tenantId("string")
        .build())
    .clientCertificateEnabled(false)
    .keyVaultReferenceIdentityId("string")
    .appSettings(Map.of("string", "string"))
    .connectionStrings(LinuxFunctionAppSlotConnectionStringArgs.builder()
        .name("string")
        .type("string")
        .value("string")
        .build())
    .contentShareForceDisabled(false)
    .dailyMemoryTimeQuota(0)
    .enabled(false)
    .ftpPublishBasicAuthenticationEnabled(false)
    .name("string")
    .functionsExtensionVersion("string")
    .httpsOnly(false)
    .builtinLoggingEnabled(false)
    .backup(LinuxFunctionAppSlotBackupArgs.builder()
        .name("string")
        .schedule(LinuxFunctionAppSlotBackupScheduleArgs.builder()
            .frequencyInterval(0)
            .frequencyUnit("string")
            .keepAtLeastOneBackup(false)
            .lastExecutionTime("string")
            .retentionPeriodDays(0)
            .startTime("string")
            .build())
        .storageAccountUrl("string")
        .enabled(false)
        .build())
    .authSettingsV2(LinuxFunctionAppSlotAuthSettingsV2Args.builder()
        .login(LinuxFunctionAppSlotAuthSettingsV2LoginArgs.builder()
            .allowedExternalRedirectUrls("string")
            .cookieExpirationConvention("string")
            .cookieExpirationTime("string")
            .logoutEndpoint("string")
            .nonceExpirationTime("string")
            .preserveUrlFragmentsForLogins(false)
            .tokenRefreshExtensionTime(0)
            .tokenStoreEnabled(false)
            .tokenStorePath("string")
            .tokenStoreSasSettingName("string")
            .validateNonce(false)
            .build())
        .customOidcV2s(LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2Args.builder()
            .clientId("string")
            .name("string")
            .openidConfigurationEndpoint("string")
            .authorisationEndpoint("string")
            .certificationUri("string")
            .clientCredentialMethod("string")
            .clientSecretSettingName("string")
            .issuerEndpoint("string")
            .nameClaimType("string")
            .scopes("string")
            .tokenEndpoint("string")
            .build())
        .activeDirectoryV2(LinuxFunctionAppSlotAuthSettingsV2ActiveDirectoryV2Args.builder()
            .clientId("string")
            .tenantAuthEndpoint("string")
            .allowedApplications("string")
            .allowedAudiences("string")
            .allowedGroups("string")
            .allowedIdentities("string")
            .clientSecretCertificateThumbprint("string")
            .clientSecretSettingName("string")
            .jwtAllowedClientApplications("string")
            .jwtAllowedGroups("string")
            .loginParameters(Map.of("string", "string"))
            .wwwAuthenticationDisabled(false)
            .build())
        .forwardProxyCustomSchemeHeaderName("string")
        .googleV2(LinuxFunctionAppSlotAuthSettingsV2GoogleV2Args.builder()
            .clientId("string")
            .clientSecretSettingName("string")
            .allowedAudiences("string")
            .loginScopes("string")
            .build())
        .githubV2(LinuxFunctionAppSlotAuthSettingsV2GithubV2Args.builder()
            .clientId("string")
            .clientSecretSettingName("string")
            .loginScopes("string")
            .build())
        .defaultProvider("string")
        .excludedPaths("string")
        .facebookV2(LinuxFunctionAppSlotAuthSettingsV2FacebookV2Args.builder()
            .appId("string")
            .appSecretSettingName("string")
            .graphApiVersion("string")
            .loginScopes("string")
            .build())
        .forwardProxyConvention("string")
        .forwardProxyCustomHostHeaderName("string")
        .azureStaticWebAppV2(LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2Args.builder()
            .clientId("string")
            .build())
        .authEnabled(false)
        .configFilePath("string")
        .httpRouteApiPrefix("string")
        .appleV2(LinuxFunctionAppSlotAuthSettingsV2AppleV2Args.builder()
            .clientId("string")
            .clientSecretSettingName("string")
            .loginScopes("string")
            .build())
        .microsoftV2(LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2Args.builder()
            .clientId("string")
            .clientSecretSettingName("string")
            .allowedAudiences("string")
            .loginScopes("string")
            .build())
        .requireAuthentication(false)
        .requireHttps(false)
        .runtimeVersion("string")
        .twitterV2(LinuxFunctionAppSlotAuthSettingsV2TwitterV2Args.builder()
            .consumerKey("string")
            .consumerSecretSettingName("string")
            .build())
        .unauthenticatedAction("string")
        .build())
    .publicNetworkAccessEnabled(false)
    .servicePlanId("string")
    .authSettings(LinuxFunctionAppSlotAuthSettingsArgs.builder()
        .enabled(false)
        .github(LinuxFunctionAppSlotAuthSettingsGithubArgs.builder()
            .clientId("string")
            .clientSecret("string")
            .clientSecretSettingName("string")
            .oauthScopes("string")
            .build())
        .issuer("string")
        .defaultProvider("string")
        .additionalLoginParameters(Map.of("string", "string"))
        .facebook(LinuxFunctionAppSlotAuthSettingsFacebookArgs.builder()
            .appId("string")
            .appSecret("string")
            .appSecretSettingName("string")
            .oauthScopes("string")
            .build())
        .activeDirectory(LinuxFunctionAppSlotAuthSettingsActiveDirectoryArgs.builder()
            .clientId("string")
            .allowedAudiences("string")
            .clientSecret("string")
            .clientSecretSettingName("string")
            .build())
        .google(LinuxFunctionAppSlotAuthSettingsGoogleArgs.builder()
            .clientId("string")
            .clientSecret("string")
            .clientSecretSettingName("string")
            .oauthScopes("string")
            .build())
        .allowedExternalRedirectUrls("string")
        .microsoft(LinuxFunctionAppSlotAuthSettingsMicrosoftArgs.builder()
            .clientId("string")
            .clientSecret("string")
            .clientSecretSettingName("string")
            .oauthScopes("string")
            .build())
        .runtimeVersion("string")
        .tokenRefreshExtensionHours(0)
        .tokenStoreEnabled(false)
        .twitter(LinuxFunctionAppSlotAuthSettingsTwitterArgs.builder()
            .consumerKey("string")
            .consumerSecret("string")
            .consumerSecretSettingName("string")
            .build())
        .unauthenticatedClientAction("string")
        .build())
    .storageAccountAccessKey("string")
    .storageAccountName("string")
    .storageAccounts(LinuxFunctionAppSlotStorageAccountArgs.builder()
        .accessKey("string")
        .accountName("string")
        .name("string")
        .shareName("string")
        .type("string")
        .mountPath("string")
        .build())
    .storageKeyVaultSecretId("string")
    .storageUsesManagedIdentity(false)
    .tags(Map.of("string", "string"))
    .virtualNetworkSubnetId("string")
    .vnetImagePullEnabled(false)
    .webdeployPublishBasicAuthenticationEnabled(false)
    .build());
linux_function_app_slot_resource = azure.appservice.LinuxFunctionAppSlot("linuxFunctionAppSlotResource",
    function_app_id="string",
    site_config={
        "always_on": False,
        "api_definition_url": "string",
        "api_management_api_id": "string",
        "app_command_line": "string",
        "app_scale_limit": 0,
        "app_service_logs": {
            "disk_quota_mb": 0,
            "retention_period_days": 0,
        },
        "application_insights_connection_string": "string",
        "application_insights_key": "string",
        "application_stack": {
            "dockers": [{
                "image_name": "string",
                "image_tag": "string",
                "registry_url": "string",
                "registry_password": "string",
                "registry_username": "string",
            }],
            "dotnet_version": "string",
            "java_version": "string",
            "node_version": "string",
            "powershell_core_version": "string",
            "python_version": "string",
            "use_custom_runtime": False,
            "use_dotnet_isolated_runtime": False,
        },
        "auto_swap_slot_name": "string",
        "container_registry_managed_identity_client_id": "string",
        "container_registry_use_managed_identity": False,
        "cors": {
            "allowed_origins": ["string"],
            "support_credentials": False,
        },
        "default_documents": ["string"],
        "detailed_error_logging_enabled": False,
        "elastic_instance_minimum": 0,
        "ftps_state": "string",
        "health_check_eviction_time_in_min": 0,
        "health_check_path": "string",
        "http2_enabled": False,
        "ip_restriction_default_action": "string",
        "ip_restrictions": [{
            "action": "string",
            "description": "string",
            "headers": {
                "x_azure_fdids": ["string"],
                "x_fd_health_probe": "string",
                "x_forwarded_fors": ["string"],
                "x_forwarded_hosts": ["string"],
            },
            "ip_address": "string",
            "name": "string",
            "priority": 0,
            "service_tag": "string",
            "virtual_network_subnet_id": "string",
        }],
        "linux_fx_version": "string",
        "load_balancing_mode": "string",
        "managed_pipeline_mode": "string",
        "minimum_tls_version": "string",
        "pre_warmed_instance_count": 0,
        "remote_debugging_enabled": False,
        "remote_debugging_version": "string",
        "runtime_scale_monitoring_enabled": False,
        "scm_ip_restriction_default_action": "string",
        "scm_ip_restrictions": [{
            "action": "string",
            "description": "string",
            "headers": {
                "x_azure_fdids": ["string"],
                "x_fd_health_probe": "string",
                "x_forwarded_fors": ["string"],
                "x_forwarded_hosts": ["string"],
            },
            "ip_address": "string",
            "name": "string",
            "priority": 0,
            "service_tag": "string",
            "virtual_network_subnet_id": "string",
        }],
        "scm_minimum_tls_version": "string",
        "scm_type": "string",
        "scm_use_main_ip_restriction": False,
        "use32_bit_worker": False,
        "vnet_route_all_enabled": False,
        "websockets_enabled": False,
        "worker_count": 0,
    },
    client_certificate_mode="string",
    client_certificate_exclusion_paths="string",
    identity={
        "type": "string",
        "identity_ids": ["string"],
        "principal_id": "string",
        "tenant_id": "string",
    },
    client_certificate_enabled=False,
    key_vault_reference_identity_id="string",
    app_settings={
        "string": "string",
    },
    connection_strings=[{
        "name": "string",
        "type": "string",
        "value": "string",
    }],
    content_share_force_disabled=False,
    daily_memory_time_quota=0,
    enabled=False,
    ftp_publish_basic_authentication_enabled=False,
    name="string",
    functions_extension_version="string",
    https_only=False,
    builtin_logging_enabled=False,
    backup={
        "name": "string",
        "schedule": {
            "frequency_interval": 0,
            "frequency_unit": "string",
            "keep_at_least_one_backup": False,
            "last_execution_time": "string",
            "retention_period_days": 0,
            "start_time": "string",
        },
        "storage_account_url": "string",
        "enabled": False,
    },
    auth_settings_v2={
        "login": {
            "allowed_external_redirect_urls": ["string"],
            "cookie_expiration_convention": "string",
            "cookie_expiration_time": "string",
            "logout_endpoint": "string",
            "nonce_expiration_time": "string",
            "preserve_url_fragments_for_logins": False,
            "token_refresh_extension_time": 0,
            "token_store_enabled": False,
            "token_store_path": "string",
            "token_store_sas_setting_name": "string",
            "validate_nonce": False,
        },
        "custom_oidc_v2s": [{
            "client_id": "string",
            "name": "string",
            "openid_configuration_endpoint": "string",
            "authorisation_endpoint": "string",
            "certification_uri": "string",
            "client_credential_method": "string",
            "client_secret_setting_name": "string",
            "issuer_endpoint": "string",
            "name_claim_type": "string",
            "scopes": ["string"],
            "token_endpoint": "string",
        }],
        "active_directory_v2": {
            "client_id": "string",
            "tenant_auth_endpoint": "string",
            "allowed_applications": ["string"],
            "allowed_audiences": ["string"],
            "allowed_groups": ["string"],
            "allowed_identities": ["string"],
            "client_secret_certificate_thumbprint": "string",
            "client_secret_setting_name": "string",
            "jwt_allowed_client_applications": ["string"],
            "jwt_allowed_groups": ["string"],
            "login_parameters": {
                "string": "string",
            },
            "www_authentication_disabled": False,
        },
        "forward_proxy_custom_scheme_header_name": "string",
        "google_v2": {
            "client_id": "string",
            "client_secret_setting_name": "string",
            "allowed_audiences": ["string"],
            "login_scopes": ["string"],
        },
        "github_v2": {
            "client_id": "string",
            "client_secret_setting_name": "string",
            "login_scopes": ["string"],
        },
        "default_provider": "string",
        "excluded_paths": ["string"],
        "facebook_v2": {
            "app_id": "string",
            "app_secret_setting_name": "string",
            "graph_api_version": "string",
            "login_scopes": ["string"],
        },
        "forward_proxy_convention": "string",
        "forward_proxy_custom_host_header_name": "string",
        "azure_static_web_app_v2": {
            "client_id": "string",
        },
        "auth_enabled": False,
        "config_file_path": "string",
        "http_route_api_prefix": "string",
        "apple_v2": {
            "client_id": "string",
            "client_secret_setting_name": "string",
            "login_scopes": ["string"],
        },
        "microsoft_v2": {
            "client_id": "string",
            "client_secret_setting_name": "string",
            "allowed_audiences": ["string"],
            "login_scopes": ["string"],
        },
        "require_authentication": False,
        "require_https": False,
        "runtime_version": "string",
        "twitter_v2": {
            "consumer_key": "string",
            "consumer_secret_setting_name": "string",
        },
        "unauthenticated_action": "string",
    },
    public_network_access_enabled=False,
    service_plan_id="string",
    auth_settings={
        "enabled": False,
        "github": {
            "client_id": "string",
            "client_secret": "string",
            "client_secret_setting_name": "string",
            "oauth_scopes": ["string"],
        },
        "issuer": "string",
        "default_provider": "string",
        "additional_login_parameters": {
            "string": "string",
        },
        "facebook": {
            "app_id": "string",
            "app_secret": "string",
            "app_secret_setting_name": "string",
            "oauth_scopes": ["string"],
        },
        "active_directory": {
            "client_id": "string",
            "allowed_audiences": ["string"],
            "client_secret": "string",
            "client_secret_setting_name": "string",
        },
        "google": {
            "client_id": "string",
            "client_secret": "string",
            "client_secret_setting_name": "string",
            "oauth_scopes": ["string"],
        },
        "allowed_external_redirect_urls": ["string"],
        "microsoft": {
            "client_id": "string",
            "client_secret": "string",
            "client_secret_setting_name": "string",
            "oauth_scopes": ["string"],
        },
        "runtime_version": "string",
        "token_refresh_extension_hours": 0,
        "token_store_enabled": False,
        "twitter": {
            "consumer_key": "string",
            "consumer_secret": "string",
            "consumer_secret_setting_name": "string",
        },
        "unauthenticated_client_action": "string",
    },
    storage_account_access_key="string",
    storage_account_name="string",
    storage_accounts=[{
        "access_key": "string",
        "account_name": "string",
        "name": "string",
        "share_name": "string",
        "type": "string",
        "mount_path": "string",
    }],
    storage_key_vault_secret_id="string",
    storage_uses_managed_identity=False,
    tags={
        "string": "string",
    },
    virtual_network_subnet_id="string",
    vnet_image_pull_enabled=False,
    webdeploy_publish_basic_authentication_enabled=False)
const linuxFunctionAppSlotResource = new azure.appservice.LinuxFunctionAppSlot("linuxFunctionAppSlotResource", {
    functionAppId: "string",
    siteConfig: {
        alwaysOn: false,
        apiDefinitionUrl: "string",
        apiManagementApiId: "string",
        appCommandLine: "string",
        appScaleLimit: 0,
        appServiceLogs: {
            diskQuotaMb: 0,
            retentionPeriodDays: 0,
        },
        applicationInsightsConnectionString: "string",
        applicationInsightsKey: "string",
        applicationStack: {
            dockers: [{
                imageName: "string",
                imageTag: "string",
                registryUrl: "string",
                registryPassword: "string",
                registryUsername: "string",
            }],
            dotnetVersion: "string",
            javaVersion: "string",
            nodeVersion: "string",
            powershellCoreVersion: "string",
            pythonVersion: "string",
            useCustomRuntime: false,
            useDotnetIsolatedRuntime: false,
        },
        autoSwapSlotName: "string",
        containerRegistryManagedIdentityClientId: "string",
        containerRegistryUseManagedIdentity: false,
        cors: {
            allowedOrigins: ["string"],
            supportCredentials: false,
        },
        defaultDocuments: ["string"],
        detailedErrorLoggingEnabled: false,
        elasticInstanceMinimum: 0,
        ftpsState: "string",
        healthCheckEvictionTimeInMin: 0,
        healthCheckPath: "string",
        http2Enabled: false,
        ipRestrictionDefaultAction: "string",
        ipRestrictions: [{
            action: "string",
            description: "string",
            headers: {
                xAzureFdids: ["string"],
                xFdHealthProbe: "string",
                xForwardedFors: ["string"],
                xForwardedHosts: ["string"],
            },
            ipAddress: "string",
            name: "string",
            priority: 0,
            serviceTag: "string",
            virtualNetworkSubnetId: "string",
        }],
        linuxFxVersion: "string",
        loadBalancingMode: "string",
        managedPipelineMode: "string",
        minimumTlsVersion: "string",
        preWarmedInstanceCount: 0,
        remoteDebuggingEnabled: false,
        remoteDebuggingVersion: "string",
        runtimeScaleMonitoringEnabled: false,
        scmIpRestrictionDefaultAction: "string",
        scmIpRestrictions: [{
            action: "string",
            description: "string",
            headers: {
                xAzureFdids: ["string"],
                xFdHealthProbe: "string",
                xForwardedFors: ["string"],
                xForwardedHosts: ["string"],
            },
            ipAddress: "string",
            name: "string",
            priority: 0,
            serviceTag: "string",
            virtualNetworkSubnetId: "string",
        }],
        scmMinimumTlsVersion: "string",
        scmType: "string",
        scmUseMainIpRestriction: false,
        use32BitWorker: false,
        vnetRouteAllEnabled: false,
        websocketsEnabled: false,
        workerCount: 0,
    },
    clientCertificateMode: "string",
    clientCertificateExclusionPaths: "string",
    identity: {
        type: "string",
        identityIds: ["string"],
        principalId: "string",
        tenantId: "string",
    },
    clientCertificateEnabled: false,
    keyVaultReferenceIdentityId: "string",
    appSettings: {
        string: "string",
    },
    connectionStrings: [{
        name: "string",
        type: "string",
        value: "string",
    }],
    contentShareForceDisabled: false,
    dailyMemoryTimeQuota: 0,
    enabled: false,
    ftpPublishBasicAuthenticationEnabled: false,
    name: "string",
    functionsExtensionVersion: "string",
    httpsOnly: false,
    builtinLoggingEnabled: false,
    backup: {
        name: "string",
        schedule: {
            frequencyInterval: 0,
            frequencyUnit: "string",
            keepAtLeastOneBackup: false,
            lastExecutionTime: "string",
            retentionPeriodDays: 0,
            startTime: "string",
        },
        storageAccountUrl: "string",
        enabled: false,
    },
    authSettingsV2: {
        login: {
            allowedExternalRedirectUrls: ["string"],
            cookieExpirationConvention: "string",
            cookieExpirationTime: "string",
            logoutEndpoint: "string",
            nonceExpirationTime: "string",
            preserveUrlFragmentsForLogins: false,
            tokenRefreshExtensionTime: 0,
            tokenStoreEnabled: false,
            tokenStorePath: "string",
            tokenStoreSasSettingName: "string",
            validateNonce: false,
        },
        customOidcV2s: [{
            clientId: "string",
            name: "string",
            openidConfigurationEndpoint: "string",
            authorisationEndpoint: "string",
            certificationUri: "string",
            clientCredentialMethod: "string",
            clientSecretSettingName: "string",
            issuerEndpoint: "string",
            nameClaimType: "string",
            scopes: ["string"],
            tokenEndpoint: "string",
        }],
        activeDirectoryV2: {
            clientId: "string",
            tenantAuthEndpoint: "string",
            allowedApplications: ["string"],
            allowedAudiences: ["string"],
            allowedGroups: ["string"],
            allowedIdentities: ["string"],
            clientSecretCertificateThumbprint: "string",
            clientSecretSettingName: "string",
            jwtAllowedClientApplications: ["string"],
            jwtAllowedGroups: ["string"],
            loginParameters: {
                string: "string",
            },
            wwwAuthenticationDisabled: false,
        },
        forwardProxyCustomSchemeHeaderName: "string",
        googleV2: {
            clientId: "string",
            clientSecretSettingName: "string",
            allowedAudiences: ["string"],
            loginScopes: ["string"],
        },
        githubV2: {
            clientId: "string",
            clientSecretSettingName: "string",
            loginScopes: ["string"],
        },
        defaultProvider: "string",
        excludedPaths: ["string"],
        facebookV2: {
            appId: "string",
            appSecretSettingName: "string",
            graphApiVersion: "string",
            loginScopes: ["string"],
        },
        forwardProxyConvention: "string",
        forwardProxyCustomHostHeaderName: "string",
        azureStaticWebAppV2: {
            clientId: "string",
        },
        authEnabled: false,
        configFilePath: "string",
        httpRouteApiPrefix: "string",
        appleV2: {
            clientId: "string",
            clientSecretSettingName: "string",
            loginScopes: ["string"],
        },
        microsoftV2: {
            clientId: "string",
            clientSecretSettingName: "string",
            allowedAudiences: ["string"],
            loginScopes: ["string"],
        },
        requireAuthentication: false,
        requireHttps: false,
        runtimeVersion: "string",
        twitterV2: {
            consumerKey: "string",
            consumerSecretSettingName: "string",
        },
        unauthenticatedAction: "string",
    },
    publicNetworkAccessEnabled: false,
    servicePlanId: "string",
    authSettings: {
        enabled: false,
        github: {
            clientId: "string",
            clientSecret: "string",
            clientSecretSettingName: "string",
            oauthScopes: ["string"],
        },
        issuer: "string",
        defaultProvider: "string",
        additionalLoginParameters: {
            string: "string",
        },
        facebook: {
            appId: "string",
            appSecret: "string",
            appSecretSettingName: "string",
            oauthScopes: ["string"],
        },
        activeDirectory: {
            clientId: "string",
            allowedAudiences: ["string"],
            clientSecret: "string",
            clientSecretSettingName: "string",
        },
        google: {
            clientId: "string",
            clientSecret: "string",
            clientSecretSettingName: "string",
            oauthScopes: ["string"],
        },
        allowedExternalRedirectUrls: ["string"],
        microsoft: {
            clientId: "string",
            clientSecret: "string",
            clientSecretSettingName: "string",
            oauthScopes: ["string"],
        },
        runtimeVersion: "string",
        tokenRefreshExtensionHours: 0,
        tokenStoreEnabled: false,
        twitter: {
            consumerKey: "string",
            consumerSecret: "string",
            consumerSecretSettingName: "string",
        },
        unauthenticatedClientAction: "string",
    },
    storageAccountAccessKey: "string",
    storageAccountName: "string",
    storageAccounts: [{
        accessKey: "string",
        accountName: "string",
        name: "string",
        shareName: "string",
        type: "string",
        mountPath: "string",
    }],
    storageKeyVaultSecretId: "string",
    storageUsesManagedIdentity: false,
    tags: {
        string: "string",
    },
    virtualNetworkSubnetId: "string",
    vnetImagePullEnabled: false,
    webdeployPublishBasicAuthenticationEnabled: false,
});
type: azure:appservice:LinuxFunctionAppSlot
properties:
    appSettings:
        string: string
    authSettings:
        activeDirectory:
            allowedAudiences:
                - string
            clientId: string
            clientSecret: string
            clientSecretSettingName: string
        additionalLoginParameters:
            string: string
        allowedExternalRedirectUrls:
            - string
        defaultProvider: string
        enabled: false
        facebook:
            appId: string
            appSecret: string
            appSecretSettingName: string
            oauthScopes:
                - string
        github:
            clientId: string
            clientSecret: string
            clientSecretSettingName: string
            oauthScopes:
                - string
        google:
            clientId: string
            clientSecret: string
            clientSecretSettingName: string
            oauthScopes:
                - string
        issuer: string
        microsoft:
            clientId: string
            clientSecret: string
            clientSecretSettingName: string
            oauthScopes:
                - string
        runtimeVersion: string
        tokenRefreshExtensionHours: 0
        tokenStoreEnabled: false
        twitter:
            consumerKey: string
            consumerSecret: string
            consumerSecretSettingName: string
        unauthenticatedClientAction: string
    authSettingsV2:
        activeDirectoryV2:
            allowedApplications:
                - string
            allowedAudiences:
                - string
            allowedGroups:
                - string
            allowedIdentities:
                - string
            clientId: string
            clientSecretCertificateThumbprint: string
            clientSecretSettingName: string
            jwtAllowedClientApplications:
                - string
            jwtAllowedGroups:
                - string
            loginParameters:
                string: string
            tenantAuthEndpoint: string
            wwwAuthenticationDisabled: false
        appleV2:
            clientId: string
            clientSecretSettingName: string
            loginScopes:
                - string
        authEnabled: false
        azureStaticWebAppV2:
            clientId: string
        configFilePath: string
        customOidcV2s:
            - authorisationEndpoint: string
              certificationUri: string
              clientCredentialMethod: string
              clientId: string
              clientSecretSettingName: string
              issuerEndpoint: string
              name: string
              nameClaimType: string
              openidConfigurationEndpoint: string
              scopes:
                - string
              tokenEndpoint: string
        defaultProvider: string
        excludedPaths:
            - string
        facebookV2:
            appId: string
            appSecretSettingName: string
            graphApiVersion: string
            loginScopes:
                - string
        forwardProxyConvention: string
        forwardProxyCustomHostHeaderName: string
        forwardProxyCustomSchemeHeaderName: string
        githubV2:
            clientId: string
            clientSecretSettingName: string
            loginScopes:
                - string
        googleV2:
            allowedAudiences:
                - string
            clientId: string
            clientSecretSettingName: string
            loginScopes:
                - string
        httpRouteApiPrefix: string
        login:
            allowedExternalRedirectUrls:
                - string
            cookieExpirationConvention: string
            cookieExpirationTime: string
            logoutEndpoint: string
            nonceExpirationTime: string
            preserveUrlFragmentsForLogins: false
            tokenRefreshExtensionTime: 0
            tokenStoreEnabled: false
            tokenStorePath: string
            tokenStoreSasSettingName: string
            validateNonce: false
        microsoftV2:
            allowedAudiences:
                - string
            clientId: string
            clientSecretSettingName: string
            loginScopes:
                - string
        requireAuthentication: false
        requireHttps: false
        runtimeVersion: string
        twitterV2:
            consumerKey: string
            consumerSecretSettingName: string
        unauthenticatedAction: string
    backup:
        enabled: false
        name: string
        schedule:
            frequencyInterval: 0
            frequencyUnit: string
            keepAtLeastOneBackup: false
            lastExecutionTime: string
            retentionPeriodDays: 0
            startTime: string
        storageAccountUrl: string
    builtinLoggingEnabled: false
    clientCertificateEnabled: false
    clientCertificateExclusionPaths: string
    clientCertificateMode: string
    connectionStrings:
        - name: string
          type: string
          value: string
    contentShareForceDisabled: false
    dailyMemoryTimeQuota: 0
    enabled: false
    ftpPublishBasicAuthenticationEnabled: false
    functionAppId: string
    functionsExtensionVersion: string
    httpsOnly: false
    identity:
        identityIds:
            - string
        principalId: string
        tenantId: string
        type: string
    keyVaultReferenceIdentityId: string
    name: string
    publicNetworkAccessEnabled: false
    servicePlanId: string
    siteConfig:
        alwaysOn: false
        apiDefinitionUrl: string
        apiManagementApiId: string
        appCommandLine: string
        appScaleLimit: 0
        appServiceLogs:
            diskQuotaMb: 0
            retentionPeriodDays: 0
        applicationInsightsConnectionString: string
        applicationInsightsKey: string
        applicationStack:
            dockers:
                - imageName: string
                  imageTag: string
                  registryPassword: string
                  registryUrl: string
                  registryUsername: string
            dotnetVersion: string
            javaVersion: string
            nodeVersion: string
            powershellCoreVersion: string
            pythonVersion: string
            useCustomRuntime: false
            useDotnetIsolatedRuntime: false
        autoSwapSlotName: string
        containerRegistryManagedIdentityClientId: string
        containerRegistryUseManagedIdentity: false
        cors:
            allowedOrigins:
                - string
            supportCredentials: false
        defaultDocuments:
            - string
        detailedErrorLoggingEnabled: false
        elasticInstanceMinimum: 0
        ftpsState: string
        healthCheckEvictionTimeInMin: 0
        healthCheckPath: string
        http2Enabled: false
        ipRestrictionDefaultAction: string
        ipRestrictions:
            - action: string
              description: string
              headers:
                xAzureFdids:
                    - string
                xFdHealthProbe: string
                xForwardedFors:
                    - string
                xForwardedHosts:
                    - string
              ipAddress: string
              name: string
              priority: 0
              serviceTag: string
              virtualNetworkSubnetId: string
        linuxFxVersion: string
        loadBalancingMode: string
        managedPipelineMode: string
        minimumTlsVersion: string
        preWarmedInstanceCount: 0
        remoteDebuggingEnabled: false
        remoteDebuggingVersion: string
        runtimeScaleMonitoringEnabled: false
        scmIpRestrictionDefaultAction: string
        scmIpRestrictions:
            - action: string
              description: string
              headers:
                xAzureFdids:
                    - string
                xFdHealthProbe: string
                xForwardedFors:
                    - string
                xForwardedHosts:
                    - string
              ipAddress: string
              name: string
              priority: 0
              serviceTag: string
              virtualNetworkSubnetId: string
        scmMinimumTlsVersion: string
        scmType: string
        scmUseMainIpRestriction: false
        use32BitWorker: false
        vnetRouteAllEnabled: false
        websocketsEnabled: false
        workerCount: 0
    storageAccountAccessKey: string
    storageAccountName: string
    storageAccounts:
        - accessKey: string
          accountName: string
          mountPath: string
          name: string
          shareName: string
          type: string
    storageKeyVaultSecretId: string
    storageUsesManagedIdentity: false
    tags:
        string: string
    virtualNetworkSubnetId: string
    vnetImagePullEnabled: false
    webdeployPublishBasicAuthenticationEnabled: false
LinuxFunctionAppSlot Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The LinuxFunctionAppSlot resource accepts the following input properties:
- FunctionApp stringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- SiteConfig LinuxFunction App Slot Site Config 
- a site_configblock as detailed below.
- AppSettings Dictionary<string, string>
- A map of key-value pairs for App Settings and custom values.
- AuthSettings LinuxFunction App Slot Auth Settings 
- an auth_settingsblock as detailed below.
- AuthSettings LinuxV2 Function App Slot Auth Settings V2 
- an auth_settings_v2block as detailed below.
- Backup
LinuxFunction App Slot Backup 
- a backupblock as detailed below.
- BuiltinLogging boolEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- ClientCertificate boolEnabled 
- Should the Function App Slot use Client Certificates.
- ClientCertificate stringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- ClientCertificate stringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- ConnectionStrings List<LinuxFunction App Slot Connection String> 
- a connection_stringblock as detailed below.
- bool
- Force disable the content share settings.
- DailyMemory intTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- Enabled bool
- Is the Linux Function App Slot enabled. Defaults to true.
- FtpPublish boolBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- FunctionsExtension stringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- HttpsOnly bool
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- Identity
LinuxFunction App Slot Identity 
- An identityblock as detailed below.
- KeyVault stringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- Name string
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- PublicNetwork boolAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- ServicePlan stringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- StorageAccount stringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- StorageAccount stringName 
- The backend storage account name which will be used by this Function App Slot.
- StorageAccounts List<LinuxFunction App Slot Storage Account> 
- One or more storage_accountblocks as defined below.
- StorageKey stringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- StorageUses boolManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Dictionary<string, string>
- A mapping of tags which should be assigned to the Linux Function App.
- VirtualNetwork stringSubnet Id 
- VnetImage boolPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- WebdeployPublish boolBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- FunctionApp stringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- SiteConfig LinuxFunction App Slot Site Config Args 
- a site_configblock as detailed below.
- AppSettings map[string]string
- A map of key-value pairs for App Settings and custom values.
- AuthSettings LinuxFunction App Slot Auth Settings Args 
- an auth_settingsblock as detailed below.
- AuthSettings LinuxV2 Function App Slot Auth Settings V2Args 
- an auth_settings_v2block as detailed below.
- Backup
LinuxFunction App Slot Backup Args 
- a backupblock as detailed below.
- BuiltinLogging boolEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- ClientCertificate boolEnabled 
- Should the Function App Slot use Client Certificates.
- ClientCertificate stringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- ClientCertificate stringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- ConnectionStrings []LinuxFunction App Slot Connection String Args 
- a connection_stringblock as detailed below.
- bool
- Force disable the content share settings.
- DailyMemory intTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- Enabled bool
- Is the Linux Function App Slot enabled. Defaults to true.
- FtpPublish boolBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- FunctionsExtension stringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- HttpsOnly bool
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- Identity
LinuxFunction App Slot Identity Args 
- An identityblock as detailed below.
- KeyVault stringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- Name string
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- PublicNetwork boolAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- ServicePlan stringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- StorageAccount stringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- StorageAccount stringName 
- The backend storage account name which will be used by this Function App Slot.
- StorageAccounts []LinuxFunction App Slot Storage Account Args 
- One or more storage_accountblocks as defined below.
- StorageKey stringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- StorageUses boolManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- map[string]string
- A mapping of tags which should be assigned to the Linux Function App.
- VirtualNetwork stringSubnet Id 
- VnetImage boolPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- WebdeployPublish boolBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- functionApp StringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- siteConfig LinuxFunction App Slot Site Config 
- a site_configblock as detailed below.
- appSettings Map<String,String>
- A map of key-value pairs for App Settings and custom values.
- authSettings LinuxFunction App Slot Auth Settings 
- an auth_settingsblock as detailed below.
- authSettings LinuxV2 Function App Slot Auth Settings V2 
- an auth_settings_v2block as detailed below.
- backup
LinuxFunction App Slot Backup 
- a backupblock as detailed below.
- builtinLogging BooleanEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- clientCertificate BooleanEnabled 
- Should the Function App Slot use Client Certificates.
- clientCertificate StringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- clientCertificate StringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connectionStrings List<LinuxFunction App Slot Connection String> 
- a connection_stringblock as detailed below.
- Boolean
- Force disable the content share settings.
- dailyMemory IntegerTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- enabled Boolean
- Is the Linux Function App Slot enabled. Defaults to true.
- ftpPublish BooleanBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- functionsExtension StringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- httpsOnly Boolean
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity
LinuxFunction App Slot Identity 
- An identityblock as detailed below.
- keyVault StringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- name String
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- publicNetwork BooleanAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- servicePlan StringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- storageAccount StringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- storageAccount StringName 
- The backend storage account name which will be used by this Function App Slot.
- storageAccounts List<LinuxFunction App Slot Storage Account> 
- One or more storage_accountblocks as defined below.
- storageKey StringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storageUses BooleanManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Map<String,String>
- A mapping of tags which should be assigned to the Linux Function App.
- virtualNetwork StringSubnet Id 
- vnetImage BooleanPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeployPublish BooleanBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- functionApp stringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- siteConfig LinuxFunction App Slot Site Config 
- a site_configblock as detailed below.
- appSettings {[key: string]: string}
- A map of key-value pairs for App Settings and custom values.
- authSettings LinuxFunction App Slot Auth Settings 
- an auth_settingsblock as detailed below.
- authSettings LinuxV2 Function App Slot Auth Settings V2 
- an auth_settings_v2block as detailed below.
- backup
LinuxFunction App Slot Backup 
- a backupblock as detailed below.
- builtinLogging booleanEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- clientCertificate booleanEnabled 
- Should the Function App Slot use Client Certificates.
- clientCertificate stringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- clientCertificate stringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connectionStrings LinuxFunction App Slot Connection String[] 
- a connection_stringblock as detailed below.
- boolean
- Force disable the content share settings.
- dailyMemory numberTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- enabled boolean
- Is the Linux Function App Slot enabled. Defaults to true.
- ftpPublish booleanBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- functionsExtension stringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- httpsOnly boolean
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity
LinuxFunction App Slot Identity 
- An identityblock as detailed below.
- keyVault stringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- name string
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- publicNetwork booleanAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- servicePlan stringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- storageAccount stringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- storageAccount stringName 
- The backend storage account name which will be used by this Function App Slot.
- storageAccounts LinuxFunction App Slot Storage Account[] 
- One or more storage_accountblocks as defined below.
- storageKey stringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storageUses booleanManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- {[key: string]: string}
- A mapping of tags which should be assigned to the Linux Function App.
- virtualNetwork stringSubnet Id 
- vnetImage booleanPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeployPublish booleanBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- function_app_ strid 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- site_config LinuxFunction App Slot Site Config Args 
- a site_configblock as detailed below.
- app_settings Mapping[str, str]
- A map of key-value pairs for App Settings and custom values.
- auth_settings LinuxFunction App Slot Auth Settings Args 
- an auth_settingsblock as detailed below.
- auth_settings_ Linuxv2 Function App Slot Auth Settings V2Args 
- an auth_settings_v2block as detailed below.
- backup
LinuxFunction App Slot Backup Args 
- a backupblock as detailed below.
- builtin_logging_ boolenabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- client_certificate_ boolenabled 
- Should the Function App Slot use Client Certificates.
- client_certificate_ strexclusion_ paths 
- Paths to exclude when using client certificates, separated by ;
- client_certificate_ strmode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connection_strings Sequence[LinuxFunction App Slot Connection String Args] 
- a connection_stringblock as detailed below.
- bool
- Force disable the content share settings.
- daily_memory_ inttime_ quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- enabled bool
- Is the Linux Function App Slot enabled. Defaults to true.
- ftp_publish_ boolbasic_ authentication_ enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- functions_extension_ strversion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- https_only bool
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity
LinuxFunction App Slot Identity Args 
- An identityblock as detailed below.
- key_vault_ strreference_ identity_ id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- name str
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- public_network_ boolaccess_ enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- service_plan_ strid 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- storage_account_ straccess_ key 
- The access key which will be used to access the storage account for the Function App Slot.
- storage_account_ strname 
- The backend storage account name which will be used by this Function App Slot.
- storage_accounts Sequence[LinuxFunction App Slot Storage Account Args] 
- One or more storage_accountblocks as defined below.
- storage_key_ strvault_ secret_ id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storage_uses_ boolmanaged_ identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Mapping[str, str]
- A mapping of tags which should be assigned to the Linux Function App.
- virtual_network_ strsubnet_ id 
- vnet_image_ boolpull_ enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeploy_publish_ boolbasic_ authentication_ enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- functionApp StringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- siteConfig Property Map
- a site_configblock as detailed below.
- appSettings Map<String>
- A map of key-value pairs for App Settings and custom values.
- authSettings Property Map
- an auth_settingsblock as detailed below.
- authSettings Property MapV2 
- an auth_settings_v2block as detailed below.
- backup Property Map
- a backupblock as detailed below.
- builtinLogging BooleanEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- clientCertificate BooleanEnabled 
- Should the Function App Slot use Client Certificates.
- clientCertificate StringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- clientCertificate StringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connectionStrings List<Property Map>
- a connection_stringblock as detailed below.
- Boolean
- Force disable the content share settings.
- dailyMemory NumberTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- enabled Boolean
- Is the Linux Function App Slot enabled. Defaults to true.
- ftpPublish BooleanBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- functionsExtension StringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- httpsOnly Boolean
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity Property Map
- An identityblock as detailed below.
- keyVault StringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- name String
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- publicNetwork BooleanAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- servicePlan StringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- storageAccount StringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- storageAccount StringName 
- The backend storage account name which will be used by this Function App Slot.
- storageAccounts List<Property Map>
- One or more storage_accountblocks as defined below.
- storageKey StringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storageUses BooleanManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Map<String>
- A mapping of tags which should be assigned to the Linux Function App.
- virtualNetwork StringSubnet Id 
- vnetImage BooleanPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeployPublish BooleanBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
Outputs
All input properties are implicitly available as output properties. Additionally, the LinuxFunctionAppSlot resource produces the following output properties:
- CustomDomain stringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- DefaultHostname string
- The default hostname of the Linux Function App Slot.
- HostingEnvironment stringId 
- The ID of the App Service Environment used by Function App Slot.
- Id string
- The provider-assigned unique ID for this managed resource.
- Kind string
- The Kind value for this Linux Function App Slot.
- OutboundIp List<string>Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- OutboundIp stringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- PossibleOutbound List<string>Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- PossibleOutbound stringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- SiteCredentials List<LinuxFunction App Slot Site Credential> 
- A site_credentialblock as defined below.
- CustomDomain stringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- DefaultHostname string
- The default hostname of the Linux Function App Slot.
- HostingEnvironment stringId 
- The ID of the App Service Environment used by Function App Slot.
- Id string
- The provider-assigned unique ID for this managed resource.
- Kind string
- The Kind value for this Linux Function App Slot.
- OutboundIp []stringAddress Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- OutboundIp stringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- PossibleOutbound []stringIp Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- PossibleOutbound stringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- SiteCredentials []LinuxFunction App Slot Site Credential 
- A site_credentialblock as defined below.
- customDomain StringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- defaultHostname String
- The default hostname of the Linux Function App Slot.
- hostingEnvironment StringId 
- The ID of the App Service Environment used by Function App Slot.
- id String
- The provider-assigned unique ID for this managed resource.
- kind String
- The Kind value for this Linux Function App Slot.
- outboundIp List<String>Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outboundIp StringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possibleOutbound List<String>Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possibleOutbound StringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- siteCredentials List<LinuxFunction App Slot Site Credential> 
- A site_credentialblock as defined below.
- customDomain stringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- defaultHostname string
- The default hostname of the Linux Function App Slot.
- hostingEnvironment stringId 
- The ID of the App Service Environment used by Function App Slot.
- id string
- The provider-assigned unique ID for this managed resource.
- kind string
- The Kind value for this Linux Function App Slot.
- outboundIp string[]Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outboundIp stringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possibleOutbound string[]Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possibleOutbound stringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- siteCredentials LinuxFunction App Slot Site Credential[] 
- A site_credentialblock as defined below.
- custom_domain_ strverification_ id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- default_hostname str
- The default hostname of the Linux Function App Slot.
- hosting_environment_ strid 
- The ID of the App Service Environment used by Function App Slot.
- id str
- The provider-assigned unique ID for this managed resource.
- kind str
- The Kind value for this Linux Function App Slot.
- outbound_ip_ Sequence[str]address_ lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outbound_ip_ straddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possible_outbound_ Sequence[str]ip_ address_ lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possible_outbound_ strip_ addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- site_credentials Sequence[LinuxFunction App Slot Site Credential] 
- A site_credentialblock as defined below.
- customDomain StringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- defaultHostname String
- The default hostname of the Linux Function App Slot.
- hostingEnvironment StringId 
- The ID of the App Service Environment used by Function App Slot.
- id String
- The provider-assigned unique ID for this managed resource.
- kind String
- The Kind value for this Linux Function App Slot.
- outboundIp List<String>Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outboundIp StringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possibleOutbound List<String>Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possibleOutbound StringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- siteCredentials List<Property Map>
- A site_credentialblock as defined below.
Look up Existing LinuxFunctionAppSlot Resource
Get an existing LinuxFunctionAppSlot resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: LinuxFunctionAppSlotState, opts?: CustomResourceOptions): LinuxFunctionAppSlot@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        app_settings: Optional[Mapping[str, str]] = None,
        auth_settings: Optional[LinuxFunctionAppSlotAuthSettingsArgs] = None,
        auth_settings_v2: Optional[LinuxFunctionAppSlotAuthSettingsV2Args] = None,
        backup: Optional[LinuxFunctionAppSlotBackupArgs] = None,
        builtin_logging_enabled: Optional[bool] = None,
        client_certificate_enabled: Optional[bool] = None,
        client_certificate_exclusion_paths: Optional[str] = None,
        client_certificate_mode: Optional[str] = None,
        connection_strings: Optional[Sequence[LinuxFunctionAppSlotConnectionStringArgs]] = None,
        content_share_force_disabled: Optional[bool] = None,
        custom_domain_verification_id: Optional[str] = None,
        daily_memory_time_quota: Optional[int] = None,
        default_hostname: Optional[str] = None,
        enabled: Optional[bool] = None,
        ftp_publish_basic_authentication_enabled: Optional[bool] = None,
        function_app_id: Optional[str] = None,
        functions_extension_version: Optional[str] = None,
        hosting_environment_id: Optional[str] = None,
        https_only: Optional[bool] = None,
        identity: Optional[LinuxFunctionAppSlotIdentityArgs] = None,
        key_vault_reference_identity_id: Optional[str] = None,
        kind: Optional[str] = None,
        name: Optional[str] = None,
        outbound_ip_address_lists: Optional[Sequence[str]] = None,
        outbound_ip_addresses: Optional[str] = None,
        possible_outbound_ip_address_lists: Optional[Sequence[str]] = None,
        possible_outbound_ip_addresses: Optional[str] = None,
        public_network_access_enabled: Optional[bool] = None,
        service_plan_id: Optional[str] = None,
        site_config: Optional[LinuxFunctionAppSlotSiteConfigArgs] = None,
        site_credentials: Optional[Sequence[LinuxFunctionAppSlotSiteCredentialArgs]] = None,
        storage_account_access_key: Optional[str] = None,
        storage_account_name: Optional[str] = None,
        storage_accounts: Optional[Sequence[LinuxFunctionAppSlotStorageAccountArgs]] = None,
        storage_key_vault_secret_id: Optional[str] = None,
        storage_uses_managed_identity: Optional[bool] = None,
        tags: Optional[Mapping[str, str]] = None,
        virtual_network_subnet_id: Optional[str] = None,
        vnet_image_pull_enabled: Optional[bool] = None,
        webdeploy_publish_basic_authentication_enabled: Optional[bool] = None) -> LinuxFunctionAppSlotfunc GetLinuxFunctionAppSlot(ctx *Context, name string, id IDInput, state *LinuxFunctionAppSlotState, opts ...ResourceOption) (*LinuxFunctionAppSlot, error)public static LinuxFunctionAppSlot Get(string name, Input<string> id, LinuxFunctionAppSlotState? state, CustomResourceOptions? opts = null)public static LinuxFunctionAppSlot get(String name, Output<String> id, LinuxFunctionAppSlotState state, CustomResourceOptions options)resources:  _:    type: azure:appservice:LinuxFunctionAppSlot    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- AppSettings Dictionary<string, string>
- A map of key-value pairs for App Settings and custom values.
- AuthSettings LinuxFunction App Slot Auth Settings 
- an auth_settingsblock as detailed below.
- AuthSettings LinuxV2 Function App Slot Auth Settings V2 
- an auth_settings_v2block as detailed below.
- Backup
LinuxFunction App Slot Backup 
- a backupblock as detailed below.
- BuiltinLogging boolEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- ClientCertificate boolEnabled 
- Should the Function App Slot use Client Certificates.
- ClientCertificate stringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- ClientCertificate stringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- ConnectionStrings List<LinuxFunction App Slot Connection String> 
- a connection_stringblock as detailed below.
- bool
- Force disable the content share settings.
- CustomDomain stringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- DailyMemory intTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- DefaultHostname string
- The default hostname of the Linux Function App Slot.
- Enabled bool
- Is the Linux Function App Slot enabled. Defaults to true.
- FtpPublish boolBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- FunctionApp stringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- FunctionsExtension stringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- HostingEnvironment stringId 
- The ID of the App Service Environment used by Function App Slot.
- HttpsOnly bool
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- Identity
LinuxFunction App Slot Identity 
- An identityblock as detailed below.
- KeyVault stringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- Kind string
- The Kind value for this Linux Function App Slot.
- Name string
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- OutboundIp List<string>Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- OutboundIp stringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- PossibleOutbound List<string>Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- PossibleOutbound stringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- PublicNetwork boolAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- ServicePlan stringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- SiteConfig LinuxFunction App Slot Site Config 
- a site_configblock as detailed below.
- SiteCredentials List<LinuxFunction App Slot Site Credential> 
- A site_credentialblock as defined below.
- StorageAccount stringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- StorageAccount stringName 
- The backend storage account name which will be used by this Function App Slot.
- StorageAccounts List<LinuxFunction App Slot Storage Account> 
- One or more storage_accountblocks as defined below.
- StorageKey stringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- StorageUses boolManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Dictionary<string, string>
- A mapping of tags which should be assigned to the Linux Function App.
- VirtualNetwork stringSubnet Id 
- VnetImage boolPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- WebdeployPublish boolBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- AppSettings map[string]string
- A map of key-value pairs for App Settings and custom values.
- AuthSettings LinuxFunction App Slot Auth Settings Args 
- an auth_settingsblock as detailed below.
- AuthSettings LinuxV2 Function App Slot Auth Settings V2Args 
- an auth_settings_v2block as detailed below.
- Backup
LinuxFunction App Slot Backup Args 
- a backupblock as detailed below.
- BuiltinLogging boolEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- ClientCertificate boolEnabled 
- Should the Function App Slot use Client Certificates.
- ClientCertificate stringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- ClientCertificate stringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- ConnectionStrings []LinuxFunction App Slot Connection String Args 
- a connection_stringblock as detailed below.
- bool
- Force disable the content share settings.
- CustomDomain stringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- DailyMemory intTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- DefaultHostname string
- The default hostname of the Linux Function App Slot.
- Enabled bool
- Is the Linux Function App Slot enabled. Defaults to true.
- FtpPublish boolBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- FunctionApp stringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- FunctionsExtension stringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- HostingEnvironment stringId 
- The ID of the App Service Environment used by Function App Slot.
- HttpsOnly bool
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- Identity
LinuxFunction App Slot Identity Args 
- An identityblock as detailed below.
- KeyVault stringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- Kind string
- The Kind value for this Linux Function App Slot.
- Name string
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- OutboundIp []stringAddress Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- OutboundIp stringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- PossibleOutbound []stringIp Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- PossibleOutbound stringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- PublicNetwork boolAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- ServicePlan stringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- SiteConfig LinuxFunction App Slot Site Config Args 
- a site_configblock as detailed below.
- SiteCredentials []LinuxFunction App Slot Site Credential Args 
- A site_credentialblock as defined below.
- StorageAccount stringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- StorageAccount stringName 
- The backend storage account name which will be used by this Function App Slot.
- StorageAccounts []LinuxFunction App Slot Storage Account Args 
- One or more storage_accountblocks as defined below.
- StorageKey stringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- StorageUses boolManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- map[string]string
- A mapping of tags which should be assigned to the Linux Function App.
- VirtualNetwork stringSubnet Id 
- VnetImage boolPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- WebdeployPublish boolBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- appSettings Map<String,String>
- A map of key-value pairs for App Settings and custom values.
- authSettings LinuxFunction App Slot Auth Settings 
- an auth_settingsblock as detailed below.
- authSettings LinuxV2 Function App Slot Auth Settings V2 
- an auth_settings_v2block as detailed below.
- backup
LinuxFunction App Slot Backup 
- a backupblock as detailed below.
- builtinLogging BooleanEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- clientCertificate BooleanEnabled 
- Should the Function App Slot use Client Certificates.
- clientCertificate StringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- clientCertificate StringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connectionStrings List<LinuxFunction App Slot Connection String> 
- a connection_stringblock as detailed below.
- Boolean
- Force disable the content share settings.
- customDomain StringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- dailyMemory IntegerTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- defaultHostname String
- The default hostname of the Linux Function App Slot.
- enabled Boolean
- Is the Linux Function App Slot enabled. Defaults to true.
- ftpPublish BooleanBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- functionApp StringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- functionsExtension StringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- hostingEnvironment StringId 
- The ID of the App Service Environment used by Function App Slot.
- httpsOnly Boolean
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity
LinuxFunction App Slot Identity 
- An identityblock as detailed below.
- keyVault StringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- kind String
- The Kind value for this Linux Function App Slot.
- name String
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- outboundIp List<String>Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outboundIp StringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possibleOutbound List<String>Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possibleOutbound StringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- publicNetwork BooleanAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- servicePlan StringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- siteConfig LinuxFunction App Slot Site Config 
- a site_configblock as detailed below.
- siteCredentials List<LinuxFunction App Slot Site Credential> 
- A site_credentialblock as defined below.
- storageAccount StringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- storageAccount StringName 
- The backend storage account name which will be used by this Function App Slot.
- storageAccounts List<LinuxFunction App Slot Storage Account> 
- One or more storage_accountblocks as defined below.
- storageKey StringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storageUses BooleanManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Map<String,String>
- A mapping of tags which should be assigned to the Linux Function App.
- virtualNetwork StringSubnet Id 
- vnetImage BooleanPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeployPublish BooleanBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- appSettings {[key: string]: string}
- A map of key-value pairs for App Settings and custom values.
- authSettings LinuxFunction App Slot Auth Settings 
- an auth_settingsblock as detailed below.
- authSettings LinuxV2 Function App Slot Auth Settings V2 
- an auth_settings_v2block as detailed below.
- backup
LinuxFunction App Slot Backup 
- a backupblock as detailed below.
- builtinLogging booleanEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- clientCertificate booleanEnabled 
- Should the Function App Slot use Client Certificates.
- clientCertificate stringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- clientCertificate stringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connectionStrings LinuxFunction App Slot Connection String[] 
- a connection_stringblock as detailed below.
- boolean
- Force disable the content share settings.
- customDomain stringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- dailyMemory numberTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- defaultHostname string
- The default hostname of the Linux Function App Slot.
- enabled boolean
- Is the Linux Function App Slot enabled. Defaults to true.
- ftpPublish booleanBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- functionApp stringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- functionsExtension stringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- hostingEnvironment stringId 
- The ID of the App Service Environment used by Function App Slot.
- httpsOnly boolean
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity
LinuxFunction App Slot Identity 
- An identityblock as detailed below.
- keyVault stringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- kind string
- The Kind value for this Linux Function App Slot.
- name string
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- outboundIp string[]Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outboundIp stringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possibleOutbound string[]Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possibleOutbound stringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- publicNetwork booleanAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- servicePlan stringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- siteConfig LinuxFunction App Slot Site Config 
- a site_configblock as detailed below.
- siteCredentials LinuxFunction App Slot Site Credential[] 
- A site_credentialblock as defined below.
- storageAccount stringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- storageAccount stringName 
- The backend storage account name which will be used by this Function App Slot.
- storageAccounts LinuxFunction App Slot Storage Account[] 
- One or more storage_accountblocks as defined below.
- storageKey stringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storageUses booleanManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- {[key: string]: string}
- A mapping of tags which should be assigned to the Linux Function App.
- virtualNetwork stringSubnet Id 
- vnetImage booleanPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeployPublish booleanBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- app_settings Mapping[str, str]
- A map of key-value pairs for App Settings and custom values.
- auth_settings LinuxFunction App Slot Auth Settings Args 
- an auth_settingsblock as detailed below.
- auth_settings_ Linuxv2 Function App Slot Auth Settings V2Args 
- an auth_settings_v2block as detailed below.
- backup
LinuxFunction App Slot Backup Args 
- a backupblock as detailed below.
- builtin_logging_ boolenabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- client_certificate_ boolenabled 
- Should the Function App Slot use Client Certificates.
- client_certificate_ strexclusion_ paths 
- Paths to exclude when using client certificates, separated by ;
- client_certificate_ strmode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connection_strings Sequence[LinuxFunction App Slot Connection String Args] 
- a connection_stringblock as detailed below.
- bool
- Force disable the content share settings.
- custom_domain_ strverification_ id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- daily_memory_ inttime_ quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- default_hostname str
- The default hostname of the Linux Function App Slot.
- enabled bool
- Is the Linux Function App Slot enabled. Defaults to true.
- ftp_publish_ boolbasic_ authentication_ enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- function_app_ strid 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- functions_extension_ strversion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- hosting_environment_ strid 
- The ID of the App Service Environment used by Function App Slot.
- https_only bool
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity
LinuxFunction App Slot Identity Args 
- An identityblock as detailed below.
- key_vault_ strreference_ identity_ id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- kind str
- The Kind value for this Linux Function App Slot.
- name str
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- outbound_ip_ Sequence[str]address_ lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outbound_ip_ straddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possible_outbound_ Sequence[str]ip_ address_ lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possible_outbound_ strip_ addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- public_network_ boolaccess_ enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- service_plan_ strid 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- site_config LinuxFunction App Slot Site Config Args 
- a site_configblock as detailed below.
- site_credentials Sequence[LinuxFunction App Slot Site Credential Args] 
- A site_credentialblock as defined below.
- storage_account_ straccess_ key 
- The access key which will be used to access the storage account for the Function App Slot.
- storage_account_ strname 
- The backend storage account name which will be used by this Function App Slot.
- storage_accounts Sequence[LinuxFunction App Slot Storage Account Args] 
- One or more storage_accountblocks as defined below.
- storage_key_ strvault_ secret_ id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storage_uses_ boolmanaged_ identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Mapping[str, str]
- A mapping of tags which should be assigned to the Linux Function App.
- virtual_network_ strsubnet_ id 
- vnet_image_ boolpull_ enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeploy_publish_ boolbasic_ authentication_ enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
- appSettings Map<String>
- A map of key-value pairs for App Settings and custom values.
- authSettings Property Map
- an auth_settingsblock as detailed below.
- authSettings Property MapV2 
- an auth_settings_v2block as detailed below.
- backup Property Map
- a backupblock as detailed below.
- builtinLogging BooleanEnabled 
- Should built in logging be enabled. Configures AzureWebJobsDashboardapp setting based on the configured storage setting. Defaults totrue.
- clientCertificate BooleanEnabled 
- Should the Function App Slot use Client Certificates.
- clientCertificate StringExclusion Paths 
- Paths to exclude when using client certificates, separated by ;
- clientCertificate StringMode 
- The mode of the Function App Slot's client certificates requirement for incoming requests. Possible values are Required,Optional, andOptionalInteractiveUser. Defaults toOptional.
- connectionStrings List<Property Map>
- a connection_stringblock as detailed below.
- Boolean
- Force disable the content share settings.
- customDomain StringVerification Id 
- The identifier used by App Service to perform domain ownership verification via DNS TXT record.
- dailyMemory NumberTime Quota 
- The amount of memory in gigabyte-seconds that your application is allowed to consume per day. Setting this value only affects function apps in Consumption Plans. Defaults to 0.
- defaultHostname String
- The default hostname of the Linux Function App Slot.
- enabled Boolean
- Is the Linux Function App Slot enabled. Defaults to true.
- ftpPublish BooleanBasic Authentication Enabled 
- Are the default FTP Basic Authentication publishing credentials enabled. Defaults to true.
- functionApp StringId 
- The ID of the Linux Function App this Slot is a member of. Changing this forces a new resource to be created.
- functionsExtension StringVersion 
- The runtime version associated with the Function App Slot. Defaults to ~4.
- hostingEnvironment StringId 
- The ID of the App Service Environment used by Function App Slot.
- httpsOnly Boolean
- Can the Function App Slot only be accessed via HTTPS?. Defaults to false.
- identity Property Map
- An identityblock as detailed below.
- keyVault StringReference Identity Id 
- The User Assigned Identity ID used for accessing KeyVault secrets. The identity must be assigned to the application in the identityblock. For more information see - Access vaults with a user-assigned identity
- kind String
- The Kind value for this Linux Function App Slot.
- name String
- Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
- outboundIp List<String>Address Lists 
- A list of outbound IP addresses. For example ["52.23.25.3", "52.143.43.12"]
- outboundIp StringAddresses 
- A comma separated list of outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12.
- possibleOutbound List<String>Ip Address Lists 
- A list of possible outbound IP addresses, not all of which are necessarily in use. This is a superset of outbound_ip_address_list. For example["52.23.25.3", "52.143.43.12"].
- possibleOutbound StringIp Addresses 
- A comma separated list of possible outbound IP addresses as a string. For example 52.23.25.3,52.143.43.12,52.143.43.17. This is a superset ofoutbound_ip_addresses. For example["52.23.25.3", "52.143.43.12","52.143.43.17"].
- publicNetwork BooleanAccess Enabled 
- Should public network access be enabled for the Function App. Defaults to true.
- servicePlan StringId 
- The ID of the Service Plan in which to run this slot. If not specified the same Service Plan as the Linux Function App will be used.
- siteConfig Property Map
- a site_configblock as detailed below.
- siteCredentials List<Property Map>
- A site_credentialblock as defined below.
- storageAccount StringAccess Key 
- The access key which will be used to access the storage account for the Function App Slot.
- storageAccount StringName 
- The backend storage account name which will be used by this Function App Slot.
- storageAccounts List<Property Map>
- One or more storage_accountblocks as defined below.
- storageKey StringVault Secret Id 
- The Key Vault Secret ID, optionally including version, that contains the Connection String to connect to the storage account for this Function App. - NOTE: - storage_key_vault_secret_idcannot be used with- storage_account_name.- NOTE: - storage_key_vault_secret_idused without a version will use the latest version of the secret, however, the service can take up to 24h to pick up a rotation of the latest version. See the official docs for more information.
- storageUses BooleanManaged Identity 
- Should the Function App Slot use its Managed Identity to access storage. - NOTE: One of - storage_account_access_keyor- storage_uses_managed_identitymust be specified when using- storage_account_name.
- Map<String>
- A mapping of tags which should be assigned to the Linux Function App.
- virtualNetwork StringSubnet Id 
- vnetImage BooleanPull Enabled 
- Is container image pull over virtual network enabled? Defaults to false.
- webdeployPublish BooleanBasic Authentication Enabled 
- Should the default WebDeploy Basic Authentication publishing credentials enabled. Defaults to true.
Supporting Types
LinuxFunctionAppSlotAuthSettings, LinuxFunctionAppSlotAuthSettingsArgs            
- Enabled bool
- Should the Authentication / Authorization feature be enabled?
- ActiveDirectory LinuxFunction App Slot Auth Settings Active Directory 
- an active_directoryblock as detailed below.
- AdditionalLogin Dictionary<string, string>Parameters 
- Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
- AllowedExternal List<string>Redirect Urls 
- Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
- DefaultProvider string
- The default authentication provider to use when multiple providers are configured. Possible values include: - AzureActiveDirectory,- Facebook,- Google,- MicrosoftAccount,- Twitter,- Github.- NOTE: This setting is only needed if multiple providers are configured, and the - unauthenticated_client_actionis set to "RedirectToLoginPage".
- Facebook
LinuxFunction App Slot Auth Settings Facebook 
- a facebookblock as detailed below.
- Github
LinuxFunction App Slot Auth Settings Github 
- a githubblock as detailed below.
- Google
LinuxFunction App Slot Auth Settings Google 
- a googleblock as detailed below.
- Issuer string
- The OpenID Connect Issuer URI that represents the entity which issues access tokens. - NOTE: When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://sts.windows.net/{tenant-guid}/. 
- Microsoft
LinuxFunction App Slot Auth Settings Microsoft 
- a microsoftblock as detailed below.
- RuntimeVersion string
- The RuntimeVersion of the Authentication / Authorization feature in use.
- TokenRefresh doubleExtension Hours 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- TokenStore boolEnabled 
- Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to false.
- Twitter
LinuxFunction App Slot Auth Settings Twitter 
- a twitterblock as detailed below.
- UnauthenticatedClient stringAction 
- The action to take when an unauthenticated client attempts to access the app. Possible values include: RedirectToLoginPage,AllowAnonymous.
- Enabled bool
- Should the Authentication / Authorization feature be enabled?
- ActiveDirectory LinuxFunction App Slot Auth Settings Active Directory 
- an active_directoryblock as detailed below.
- AdditionalLogin map[string]stringParameters 
- Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
- AllowedExternal []stringRedirect Urls 
- Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
- DefaultProvider string
- The default authentication provider to use when multiple providers are configured. Possible values include: - AzureActiveDirectory,- Facebook,- Google,- MicrosoftAccount,- Twitter,- Github.- NOTE: This setting is only needed if multiple providers are configured, and the - unauthenticated_client_actionis set to "RedirectToLoginPage".
- Facebook
LinuxFunction App Slot Auth Settings Facebook 
- a facebookblock as detailed below.
- Github
LinuxFunction App Slot Auth Settings Github 
- a githubblock as detailed below.
- Google
LinuxFunction App Slot Auth Settings Google 
- a googleblock as detailed below.
- Issuer string
- The OpenID Connect Issuer URI that represents the entity which issues access tokens. - NOTE: When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://sts.windows.net/{tenant-guid}/. 
- Microsoft
LinuxFunction App Slot Auth Settings Microsoft 
- a microsoftblock as detailed below.
- RuntimeVersion string
- The RuntimeVersion of the Authentication / Authorization feature in use.
- TokenRefresh float64Extension Hours 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- TokenStore boolEnabled 
- Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to false.
- Twitter
LinuxFunction App Slot Auth Settings Twitter 
- a twitterblock as detailed below.
- UnauthenticatedClient stringAction 
- The action to take when an unauthenticated client attempts to access the app. Possible values include: RedirectToLoginPage,AllowAnonymous.
- enabled Boolean
- Should the Authentication / Authorization feature be enabled?
- activeDirectory LinuxFunction App Slot Auth Settings Active Directory 
- an active_directoryblock as detailed below.
- additionalLogin Map<String,String>Parameters 
- Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
- allowedExternal List<String>Redirect Urls 
- Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
- defaultProvider String
- The default authentication provider to use when multiple providers are configured. Possible values include: - AzureActiveDirectory,- Facebook,- Google,- MicrosoftAccount,- Twitter,- Github.- NOTE: This setting is only needed if multiple providers are configured, and the - unauthenticated_client_actionis set to "RedirectToLoginPage".
- facebook
LinuxFunction App Slot Auth Settings Facebook 
- a facebookblock as detailed below.
- github
LinuxFunction App Slot Auth Settings Github 
- a githubblock as detailed below.
- google
LinuxFunction App Slot Auth Settings Google 
- a googleblock as detailed below.
- issuer String
- The OpenID Connect Issuer URI that represents the entity which issues access tokens. - NOTE: When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://sts.windows.net/{tenant-guid}/. 
- microsoft
LinuxFunction App Slot Auth Settings Microsoft 
- a microsoftblock as detailed below.
- runtimeVersion String
- The RuntimeVersion of the Authentication / Authorization feature in use.
- tokenRefresh DoubleExtension Hours 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- tokenStore BooleanEnabled 
- Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to false.
- twitter
LinuxFunction App Slot Auth Settings Twitter 
- a twitterblock as detailed below.
- unauthenticatedClient StringAction 
- The action to take when an unauthenticated client attempts to access the app. Possible values include: RedirectToLoginPage,AllowAnonymous.
- enabled boolean
- Should the Authentication / Authorization feature be enabled?
- activeDirectory LinuxFunction App Slot Auth Settings Active Directory 
- an active_directoryblock as detailed below.
- additionalLogin {[key: string]: string}Parameters 
- Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
- allowedExternal string[]Redirect Urls 
- Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
- defaultProvider string
- The default authentication provider to use when multiple providers are configured. Possible values include: - AzureActiveDirectory,- Facebook,- Google,- MicrosoftAccount,- Twitter,- Github.- NOTE: This setting is only needed if multiple providers are configured, and the - unauthenticated_client_actionis set to "RedirectToLoginPage".
- facebook
LinuxFunction App Slot Auth Settings Facebook 
- a facebookblock as detailed below.
- github
LinuxFunction App Slot Auth Settings Github 
- a githubblock as detailed below.
- google
LinuxFunction App Slot Auth Settings Google 
- a googleblock as detailed below.
- issuer string
- The OpenID Connect Issuer URI that represents the entity which issues access tokens. - NOTE: When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://sts.windows.net/{tenant-guid}/. 
- microsoft
LinuxFunction App Slot Auth Settings Microsoft 
- a microsoftblock as detailed below.
- runtimeVersion string
- The RuntimeVersion of the Authentication / Authorization feature in use.
- tokenRefresh numberExtension Hours 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- tokenStore booleanEnabled 
- Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to false.
- twitter
LinuxFunction App Slot Auth Settings Twitter 
- a twitterblock as detailed below.
- unauthenticatedClient stringAction 
- The action to take when an unauthenticated client attempts to access the app. Possible values include: RedirectToLoginPage,AllowAnonymous.
- enabled bool
- Should the Authentication / Authorization feature be enabled?
- active_directory LinuxFunction App Slot Auth Settings Active Directory 
- an active_directoryblock as detailed below.
- additional_login_ Mapping[str, str]parameters 
- Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
- allowed_external_ Sequence[str]redirect_ urls 
- Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
- default_provider str
- The default authentication provider to use when multiple providers are configured. Possible values include: - AzureActiveDirectory,- Facebook,- Google,- MicrosoftAccount,- Twitter,- Github.- NOTE: This setting is only needed if multiple providers are configured, and the - unauthenticated_client_actionis set to "RedirectToLoginPage".
- facebook
LinuxFunction App Slot Auth Settings Facebook 
- a facebookblock as detailed below.
- github
LinuxFunction App Slot Auth Settings Github 
- a githubblock as detailed below.
- google
LinuxFunction App Slot Auth Settings Google 
- a googleblock as detailed below.
- issuer str
- The OpenID Connect Issuer URI that represents the entity which issues access tokens. - NOTE: When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://sts.windows.net/{tenant-guid}/. 
- microsoft
LinuxFunction App Slot Auth Settings Microsoft 
- a microsoftblock as detailed below.
- runtime_version str
- The RuntimeVersion of the Authentication / Authorization feature in use.
- token_refresh_ floatextension_ hours 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- token_store_ boolenabled 
- Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to false.
- twitter
LinuxFunction App Slot Auth Settings Twitter 
- a twitterblock as detailed below.
- unauthenticated_client_ straction 
- The action to take when an unauthenticated client attempts to access the app. Possible values include: RedirectToLoginPage,AllowAnonymous.
- enabled Boolean
- Should the Authentication / Authorization feature be enabled?
- activeDirectory Property Map
- an active_directoryblock as detailed below.
- additionalLogin Map<String>Parameters 
- Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
- allowedExternal List<String>Redirect Urls 
- Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
- defaultProvider String
- The default authentication provider to use when multiple providers are configured. Possible values include: - AzureActiveDirectory,- Facebook,- Google,- MicrosoftAccount,- Twitter,- Github.- NOTE: This setting is only needed if multiple providers are configured, and the - unauthenticated_client_actionis set to "RedirectToLoginPage".
- facebook Property Map
- a facebookblock as detailed below.
- github Property Map
- a githubblock as detailed below.
- google Property Map
- a googleblock as detailed below.
- issuer String
- The OpenID Connect Issuer URI that represents the entity which issues access tokens. - NOTE: When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://sts.windows.net/{tenant-guid}/. 
- microsoft Property Map
- a microsoftblock as detailed below.
- runtimeVersion String
- The RuntimeVersion of the Authentication / Authorization feature in use.
- tokenRefresh NumberExtension Hours 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- tokenStore BooleanEnabled 
- Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to false.
- twitter Property Map
- a twitterblock as detailed below.
- unauthenticatedClient StringAction 
- The action to take when an unauthenticated client attempts to access the app. Possible values include: RedirectToLoginPage,AllowAnonymous.
LinuxFunctionAppSlotAuthSettingsActiveDirectory, LinuxFunctionAppSlotAuthSettingsActiveDirectoryArgs                
- ClientId string
- The ID of the Client to use to authenticate with Azure Active Directory.
- AllowedAudiences List<string>
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - Note: The - client_idvalue is always considered an allowed audience.
- ClientSecret string
- The Client Secret for the Client ID. Cannot be used with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The App Setting name that contains the client secret of the Client. Cannot be used with client_secret.
- ClientId string
- The ID of the Client to use to authenticate with Azure Active Directory.
- AllowedAudiences []string
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - Note: The - client_idvalue is always considered an allowed audience.
- ClientSecret string
- The Client Secret for the Client ID. Cannot be used with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The App Setting name that contains the client secret of the Client. Cannot be used with client_secret.
- clientId String
- The ID of the Client to use to authenticate with Azure Active Directory.
- allowedAudiences List<String>
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - Note: The - client_idvalue is always considered an allowed audience.
- clientSecret String
- The Client Secret for the Client ID. Cannot be used with client_secret_setting_name.
- clientSecret StringSetting Name 
- The App Setting name that contains the client secret of the Client. Cannot be used with client_secret.
- clientId string
- The ID of the Client to use to authenticate with Azure Active Directory.
- allowedAudiences string[]
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - Note: The - client_idvalue is always considered an allowed audience.
- clientSecret string
- The Client Secret for the Client ID. Cannot be used with client_secret_setting_name.
- clientSecret stringSetting Name 
- The App Setting name that contains the client secret of the Client. Cannot be used with client_secret.
- client_id str
- The ID of the Client to use to authenticate with Azure Active Directory.
- allowed_audiences Sequence[str]
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - Note: The - client_idvalue is always considered an allowed audience.
- client_secret str
- The Client Secret for the Client ID. Cannot be used with client_secret_setting_name.
- client_secret_ strsetting_ name 
- The App Setting name that contains the client secret of the Client. Cannot be used with client_secret.
- clientId String
- The ID of the Client to use to authenticate with Azure Active Directory.
- allowedAudiences List<String>
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - Note: The - client_idvalue is always considered an allowed audience.
- clientSecret String
- The Client Secret for the Client ID. Cannot be used with client_secret_setting_name.
- clientSecret StringSetting Name 
- The App Setting name that contains the client secret of the Client. Cannot be used with client_secret.
LinuxFunctionAppSlotAuthSettingsFacebook, LinuxFunctionAppSlotAuthSettingsFacebookArgs              
- AppId string
- The App ID of the Facebook app used for login.
- AppSecret string
- The App Secret of the Facebook app used for Facebook login. Cannot be specified with app_secret_setting_name.
- AppSecret stringSetting Name 
- The app setting name that contains the app_secretvalue used for Facebook login. Cannot be specified withapp_secret.
- OauthScopes List<string>
- Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
- AppId string
- The App ID of the Facebook app used for login.
- AppSecret string
- The App Secret of the Facebook app used for Facebook login. Cannot be specified with app_secret_setting_name.
- AppSecret stringSetting Name 
- The app setting name that contains the app_secretvalue used for Facebook login. Cannot be specified withapp_secret.
- OauthScopes []string
- Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
- appId String
- The App ID of the Facebook app used for login.
- appSecret String
- The App Secret of the Facebook app used for Facebook login. Cannot be specified with app_secret_setting_name.
- appSecret StringSetting Name 
- The app setting name that contains the app_secretvalue used for Facebook login. Cannot be specified withapp_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
- appId string
- The App ID of the Facebook app used for login.
- appSecret string
- The App Secret of the Facebook app used for Facebook login. Cannot be specified with app_secret_setting_name.
- appSecret stringSetting Name 
- The app setting name that contains the app_secretvalue used for Facebook login. Cannot be specified withapp_secret.
- oauthScopes string[]
- Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
- app_id str
- The App ID of the Facebook app used for login.
- app_secret str
- The App Secret of the Facebook app used for Facebook login. Cannot be specified with app_secret_setting_name.
- app_secret_ strsetting_ name 
- The app setting name that contains the app_secretvalue used for Facebook login. Cannot be specified withapp_secret.
- oauth_scopes Sequence[str]
- Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
- appId String
- The App ID of the Facebook app used for login.
- appSecret String
- The App Secret of the Facebook app used for Facebook login. Cannot be specified with app_secret_setting_name.
- appSecret StringSetting Name 
- The app setting name that contains the app_secretvalue used for Facebook login. Cannot be specified withapp_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
LinuxFunctionAppSlotAuthSettingsGithub, LinuxFunctionAppSlotAuthSettingsGithubArgs              
- ClientId string
- The ID of the GitHub app used for login.
- ClientSecret string
- The Client Secret of the GitHub app used for GitHub login. Cannot be specified with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The app setting name that contains the client_secretvalue used for GitHub login. Cannot be specified withclient_secret.
- OauthScopes List<string>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
- ClientId string
- The ID of the GitHub app used for login.
- ClientSecret string
- The Client Secret of the GitHub app used for GitHub login. Cannot be specified with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The app setting name that contains the client_secretvalue used for GitHub login. Cannot be specified withclient_secret.
- OauthScopes []string
- Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
- clientId String
- The ID of the GitHub app used for login.
- clientSecret String
- The Client Secret of the GitHub app used for GitHub login. Cannot be specified with client_secret_setting_name.
- clientSecret StringSetting Name 
- The app setting name that contains the client_secretvalue used for GitHub login. Cannot be specified withclient_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
- clientId string
- The ID of the GitHub app used for login.
- clientSecret string
- The Client Secret of the GitHub app used for GitHub login. Cannot be specified with client_secret_setting_name.
- clientSecret stringSetting Name 
- The app setting name that contains the client_secretvalue used for GitHub login. Cannot be specified withclient_secret.
- oauthScopes string[]
- Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
- client_id str
- The ID of the GitHub app used for login.
- client_secret str
- The Client Secret of the GitHub app used for GitHub login. Cannot be specified with client_secret_setting_name.
- client_secret_ strsetting_ name 
- The app setting name that contains the client_secretvalue used for GitHub login. Cannot be specified withclient_secret.
- oauth_scopes Sequence[str]
- Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
- clientId String
- The ID of the GitHub app used for login.
- clientSecret String
- The Client Secret of the GitHub app used for GitHub login. Cannot be specified with client_secret_setting_name.
- clientSecret StringSetting Name 
- The app setting name that contains the client_secretvalue used for GitHub login. Cannot be specified withclient_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
LinuxFunctionAppSlotAuthSettingsGoogle, LinuxFunctionAppSlotAuthSettingsGoogleArgs              
- ClientId string
- The OpenID Connect Client ID for the Google web application.
- ClientSecret string
- The client secret associated with the Google web application. Cannot be specified with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The app setting name that contains the client_secretvalue used for Google login. Cannot be specified withclient_secret.
- OauthScopes List<string>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, openid,profile, andemailare used as default scopes.
- ClientId string
- The OpenID Connect Client ID for the Google web application.
- ClientSecret string
- The client secret associated with the Google web application. Cannot be specified with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The app setting name that contains the client_secretvalue used for Google login. Cannot be specified withclient_secret.
- OauthScopes []string
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, openid,profile, andemailare used as default scopes.
- clientId String
- The OpenID Connect Client ID for the Google web application.
- clientSecret String
- The client secret associated with the Google web application. Cannot be specified with client_secret_setting_name.
- clientSecret StringSetting Name 
- The app setting name that contains the client_secretvalue used for Google login. Cannot be specified withclient_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, openid,profile, andemailare used as default scopes.
- clientId string
- The OpenID Connect Client ID for the Google web application.
- clientSecret string
- The client secret associated with the Google web application. Cannot be specified with client_secret_setting_name.
- clientSecret stringSetting Name 
- The app setting name that contains the client_secretvalue used for Google login. Cannot be specified withclient_secret.
- oauthScopes string[]
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, openid,profile, andemailare used as default scopes.
- client_id str
- The OpenID Connect Client ID for the Google web application.
- client_secret str
- The client secret associated with the Google web application. Cannot be specified with client_secret_setting_name.
- client_secret_ strsetting_ name 
- The app setting name that contains the client_secretvalue used for Google login. Cannot be specified withclient_secret.
- oauth_scopes Sequence[str]
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, openid,profile, andemailare used as default scopes.
- clientId String
- The OpenID Connect Client ID for the Google web application.
- clientSecret String
- The client secret associated with the Google web application. Cannot be specified with client_secret_setting_name.
- clientSecret StringSetting Name 
- The app setting name that contains the client_secretvalue used for Google login. Cannot be specified withclient_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, openid,profile, andemailare used as default scopes.
LinuxFunctionAppSlotAuthSettingsMicrosoft, LinuxFunctionAppSlotAuthSettingsMicrosoftArgs              
- ClientId string
- The OAuth 2.0 client ID that was created for the app used for authentication.
- ClientSecret string
- The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret.
- OauthScopes List<string>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, wl.basicis used as the default scope.
- ClientId string
- The OAuth 2.0 client ID that was created for the app used for authentication.
- ClientSecret string
- The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret_setting_name.
- ClientSecret stringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret.
- OauthScopes []string
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, wl.basicis used as the default scope.
- clientId String
- The OAuth 2.0 client ID that was created for the app used for authentication.
- clientSecret String
- The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret_setting_name.
- clientSecret StringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, wl.basicis used as the default scope.
- clientId string
- The OAuth 2.0 client ID that was created for the app used for authentication.
- clientSecret string
- The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret_setting_name.
- clientSecret stringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret.
- oauthScopes string[]
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, wl.basicis used as the default scope.
- client_id str
- The OAuth 2.0 client ID that was created for the app used for authentication.
- client_secret str
- The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret_setting_name.
- client_secret_ strsetting_ name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret.
- oauth_scopes Sequence[str]
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, wl.basicis used as the default scope.
- clientId String
- The OAuth 2.0 client ID that was created for the app used for authentication.
- clientSecret String
- The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret_setting_name.
- clientSecret StringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with client_secret.
- oauthScopes List<String>
- Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, wl.basicis used as the default scope.
LinuxFunctionAppSlotAuthSettingsTwitter, LinuxFunctionAppSlotAuthSettingsTwitterArgs              
- ConsumerKey string
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- ConsumerSecret string
- The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret_setting_name.
- ConsumerSecret stringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret.
- ConsumerKey string
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- ConsumerSecret string
- The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret_setting_name.
- ConsumerSecret stringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret.
- consumerKey String
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumerSecret String
- The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret_setting_name.
- consumerSecret StringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret.
- consumerKey string
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumerSecret string
- The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret_setting_name.
- consumerSecret stringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret.
- consumer_key str
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumer_secret str
- The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret_setting_name.
- consumer_secret_ strsetting_ name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret.
- consumerKey String
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumerSecret String
- The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret_setting_name.
- consumerSecret StringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with consumer_secret.
LinuxFunctionAppSlotAuthSettingsV2, LinuxFunctionAppSlotAuthSettingsV2Args              
- Login
LinuxFunction App Slot Auth Settings V2Login 
- A loginblock as defined below.
- ActiveDirectory LinuxV2 Function App Slot Auth Settings V2Active Directory V2 
- An active_directory_v2block as defined below.
- AppleV2 LinuxFunction App Slot Auth Settings V2Apple V2 
- An apple_v2block as defined below.
- AuthEnabled bool
- Should the AuthV2 Settings be enabled. Defaults to false.
- AzureStatic LinuxWeb App V2 Function App Slot Auth Settings V2Azure Static Web App V2 
- An azure_static_web_app_v2block as defined below.
- ConfigFile stringPath 
- The path to the App Auth settings. - Note: Relative Paths are evaluated from the Site Root directory. 
- CustomOidc List<LinuxV2s Function App Slot Auth Settings V2Custom Oidc V2> 
- Zero or more custom_oidc_v2blocks as defined below.
- DefaultProvider string
- The Default Authentication Provider to use when the - unauthenticated_actionis set to- RedirectToLoginPage. Possible values include:- apple,- azureactivedirectory,- facebook,- github,- google,- twitterand the- nameof your- custom_oidc_v2provider.- NOTE: Whilst any value will be accepted by the API for - default_provider, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or custom_oidc name) as it is used to build the auth endpoint URI.
- ExcludedPaths List<string>
- The paths which should be excluded from the - unauthenticated_actionwhen it is set to- RedirectToLoginPage.- NOTE: This list should be used instead of setting - WEBSITE_WARMUP_PATHin- app_settingsas it takes priority.
- FacebookV2 LinuxFunction App Slot Auth Settings V2Facebook V2 
- A facebook_v2block as defined below.
- ForwardProxy stringConvention 
- The convention used to determine the url of the request made. Possible values include NoProxy,Standard,Custom. Defaults toNoProxy.
- ForwardProxy stringCustom Host Header Name 
- The name of the custom header containing the host of the request.
- ForwardProxy stringCustom Scheme Header Name 
- The name of the custom header containing the scheme of the request.
- GithubV2 LinuxFunction App Slot Auth Settings V2Github V2 
- A github_v2block as defined below.
- GoogleV2 LinuxFunction App Slot Auth Settings V2Google V2 
- A google_v2block as defined below.
- HttpRoute stringApi Prefix 
- The prefix that should precede all the authentication and authorisation paths. Defaults to /.auth.
- MicrosoftV2 LinuxFunction App Slot Auth Settings V2Microsoft V2 
- A microsoft_v2block as defined below.
- RequireAuthentication bool
- Should the authentication flow be used for all requests.
- RequireHttps bool
- Should HTTPS be required on connections? Defaults to true.
- RuntimeVersion string
- The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to ~1.
- TwitterV2 LinuxFunction App Slot Auth Settings V2Twitter V2 
- A twitter_v2block as defined below.
- UnauthenticatedAction string
- The action to take for requests made without authentication. Possible values include RedirectToLoginPage,AllowAnonymous,Return401, andReturn403. Defaults toRedirectToLoginPage.
- Login
LinuxFunction App Slot Auth Settings V2Login 
- A loginblock as defined below.
- ActiveDirectory LinuxV2 Function App Slot Auth Settings V2Active Directory V2 
- An active_directory_v2block as defined below.
- AppleV2 LinuxFunction App Slot Auth Settings V2Apple V2 
- An apple_v2block as defined below.
- AuthEnabled bool
- Should the AuthV2 Settings be enabled. Defaults to false.
- AzureStatic LinuxWeb App V2 Function App Slot Auth Settings V2Azure Static Web App V2 
- An azure_static_web_app_v2block as defined below.
- ConfigFile stringPath 
- The path to the App Auth settings. - Note: Relative Paths are evaluated from the Site Root directory. 
- CustomOidc []LinuxV2s Function App Slot Auth Settings V2Custom Oidc V2 
- Zero or more custom_oidc_v2blocks as defined below.
- DefaultProvider string
- The Default Authentication Provider to use when the - unauthenticated_actionis set to- RedirectToLoginPage. Possible values include:- apple,- azureactivedirectory,- facebook,- github,- google,- twitterand the- nameof your- custom_oidc_v2provider.- NOTE: Whilst any value will be accepted by the API for - default_provider, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or custom_oidc name) as it is used to build the auth endpoint URI.
- ExcludedPaths []string
- The paths which should be excluded from the - unauthenticated_actionwhen it is set to- RedirectToLoginPage.- NOTE: This list should be used instead of setting - WEBSITE_WARMUP_PATHin- app_settingsas it takes priority.
- FacebookV2 LinuxFunction App Slot Auth Settings V2Facebook V2 
- A facebook_v2block as defined below.
- ForwardProxy stringConvention 
- The convention used to determine the url of the request made. Possible values include NoProxy,Standard,Custom. Defaults toNoProxy.
- ForwardProxy stringCustom Host Header Name 
- The name of the custom header containing the host of the request.
- ForwardProxy stringCustom Scheme Header Name 
- The name of the custom header containing the scheme of the request.
- GithubV2 LinuxFunction App Slot Auth Settings V2Github V2 
- A github_v2block as defined below.
- GoogleV2 LinuxFunction App Slot Auth Settings V2Google V2 
- A google_v2block as defined below.
- HttpRoute stringApi Prefix 
- The prefix that should precede all the authentication and authorisation paths. Defaults to /.auth.
- MicrosoftV2 LinuxFunction App Slot Auth Settings V2Microsoft V2 
- A microsoft_v2block as defined below.
- RequireAuthentication bool
- Should the authentication flow be used for all requests.
- RequireHttps bool
- Should HTTPS be required on connections? Defaults to true.
- RuntimeVersion string
- The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to ~1.
- TwitterV2 LinuxFunction App Slot Auth Settings V2Twitter V2 
- A twitter_v2block as defined below.
- UnauthenticatedAction string
- The action to take for requests made without authentication. Possible values include RedirectToLoginPage,AllowAnonymous,Return401, andReturn403. Defaults toRedirectToLoginPage.
- login
LinuxFunction App Slot Auth Settings V2Login 
- A loginblock as defined below.
- activeDirectory LinuxV2 Function App Slot Auth Settings V2Active Directory V2 
- An active_directory_v2block as defined below.
- appleV2 LinuxFunction App Slot Auth Settings V2Apple V2 
- An apple_v2block as defined below.
- authEnabled Boolean
- Should the AuthV2 Settings be enabled. Defaults to false.
- azureStatic LinuxWeb App V2 Function App Slot Auth Settings V2Azure Static Web App V2 
- An azure_static_web_app_v2block as defined below.
- configFile StringPath 
- The path to the App Auth settings. - Note: Relative Paths are evaluated from the Site Root directory. 
- customOidc List<LinuxV2s Function App Slot Auth Settings V2Custom Oidc V2> 
- Zero or more custom_oidc_v2blocks as defined below.
- defaultProvider String
- The Default Authentication Provider to use when the - unauthenticated_actionis set to- RedirectToLoginPage. Possible values include:- apple,- azureactivedirectory,- facebook,- github,- google,- twitterand the- nameof your- custom_oidc_v2provider.- NOTE: Whilst any value will be accepted by the API for - default_provider, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or custom_oidc name) as it is used to build the auth endpoint URI.
- excludedPaths List<String>
- The paths which should be excluded from the - unauthenticated_actionwhen it is set to- RedirectToLoginPage.- NOTE: This list should be used instead of setting - WEBSITE_WARMUP_PATHin- app_settingsas it takes priority.
- facebookV2 LinuxFunction App Slot Auth Settings V2Facebook V2 
- A facebook_v2block as defined below.
- forwardProxy StringConvention 
- The convention used to determine the url of the request made. Possible values include NoProxy,Standard,Custom. Defaults toNoProxy.
- forwardProxy StringCustom Host Header Name 
- The name of the custom header containing the host of the request.
- forwardProxy StringCustom Scheme Header Name 
- The name of the custom header containing the scheme of the request.
- githubV2 LinuxFunction App Slot Auth Settings V2Github V2 
- A github_v2block as defined below.
- googleV2 LinuxFunction App Slot Auth Settings V2Google V2 
- A google_v2block as defined below.
- httpRoute StringApi Prefix 
- The prefix that should precede all the authentication and authorisation paths. Defaults to /.auth.
- microsoftV2 LinuxFunction App Slot Auth Settings V2Microsoft V2 
- A microsoft_v2block as defined below.
- requireAuthentication Boolean
- Should the authentication flow be used for all requests.
- requireHttps Boolean
- Should HTTPS be required on connections? Defaults to true.
- runtimeVersion String
- The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to ~1.
- twitterV2 LinuxFunction App Slot Auth Settings V2Twitter V2 
- A twitter_v2block as defined below.
- unauthenticatedAction String
- The action to take for requests made without authentication. Possible values include RedirectToLoginPage,AllowAnonymous,Return401, andReturn403. Defaults toRedirectToLoginPage.
- login
LinuxFunction App Slot Auth Settings V2Login 
- A loginblock as defined below.
- activeDirectory LinuxV2 Function App Slot Auth Settings V2Active Directory V2 
- An active_directory_v2block as defined below.
- appleV2 LinuxFunction App Slot Auth Settings V2Apple V2 
- An apple_v2block as defined below.
- authEnabled boolean
- Should the AuthV2 Settings be enabled. Defaults to false.
- azureStatic LinuxWeb App V2 Function App Slot Auth Settings V2Azure Static Web App V2 
- An azure_static_web_app_v2block as defined below.
- configFile stringPath 
- The path to the App Auth settings. - Note: Relative Paths are evaluated from the Site Root directory. 
- customOidc LinuxV2s Function App Slot Auth Settings V2Custom Oidc V2[] 
- Zero or more custom_oidc_v2blocks as defined below.
- defaultProvider string
- The Default Authentication Provider to use when the - unauthenticated_actionis set to- RedirectToLoginPage. Possible values include:- apple,- azureactivedirectory,- facebook,- github,- google,- twitterand the- nameof your- custom_oidc_v2provider.- NOTE: Whilst any value will be accepted by the API for - default_provider, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or custom_oidc name) as it is used to build the auth endpoint URI.
- excludedPaths string[]
- The paths which should be excluded from the - unauthenticated_actionwhen it is set to- RedirectToLoginPage.- NOTE: This list should be used instead of setting - WEBSITE_WARMUP_PATHin- app_settingsas it takes priority.
- facebookV2 LinuxFunction App Slot Auth Settings V2Facebook V2 
- A facebook_v2block as defined below.
- forwardProxy stringConvention 
- The convention used to determine the url of the request made. Possible values include NoProxy,Standard,Custom. Defaults toNoProxy.
- forwardProxy stringCustom Host Header Name 
- The name of the custom header containing the host of the request.
- forwardProxy stringCustom Scheme Header Name 
- The name of the custom header containing the scheme of the request.
- githubV2 LinuxFunction App Slot Auth Settings V2Github V2 
- A github_v2block as defined below.
- googleV2 LinuxFunction App Slot Auth Settings V2Google V2 
- A google_v2block as defined below.
- httpRoute stringApi Prefix 
- The prefix that should precede all the authentication and authorisation paths. Defaults to /.auth.
- microsoftV2 LinuxFunction App Slot Auth Settings V2Microsoft V2 
- A microsoft_v2block as defined below.
- requireAuthentication boolean
- Should the authentication flow be used for all requests.
- requireHttps boolean
- Should HTTPS be required on connections? Defaults to true.
- runtimeVersion string
- The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to ~1.
- twitterV2 LinuxFunction App Slot Auth Settings V2Twitter V2 
- A twitter_v2block as defined below.
- unauthenticatedAction string
- The action to take for requests made without authentication. Possible values include RedirectToLoginPage,AllowAnonymous,Return401, andReturn403. Defaults toRedirectToLoginPage.
- login
LinuxFunction App Slot Auth Settings V2Login 
- A loginblock as defined below.
- active_directory_ Linuxv2 Function App Slot Auth Settings V2Active Directory V2 
- An active_directory_v2block as defined below.
- apple_v2 LinuxFunction App Slot Auth Settings V2Apple V2 
- An apple_v2block as defined below.
- auth_enabled bool
- Should the AuthV2 Settings be enabled. Defaults to false.
- azure_static_ Linuxweb_ app_ v2 Function App Slot Auth Settings V2Azure Static Web App V2 
- An azure_static_web_app_v2block as defined below.
- config_file_ strpath 
- The path to the App Auth settings. - Note: Relative Paths are evaluated from the Site Root directory. 
- custom_oidc_ Sequence[Linuxv2s Function App Slot Auth Settings V2Custom Oidc V2] 
- Zero or more custom_oidc_v2blocks as defined below.
- default_provider str
- The Default Authentication Provider to use when the - unauthenticated_actionis set to- RedirectToLoginPage. Possible values include:- apple,- azureactivedirectory,- facebook,- github,- google,- twitterand the- nameof your- custom_oidc_v2provider.- NOTE: Whilst any value will be accepted by the API for - default_provider, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or custom_oidc name) as it is used to build the auth endpoint URI.
- excluded_paths Sequence[str]
- The paths which should be excluded from the - unauthenticated_actionwhen it is set to- RedirectToLoginPage.- NOTE: This list should be used instead of setting - WEBSITE_WARMUP_PATHin- app_settingsas it takes priority.
- facebook_v2 LinuxFunction App Slot Auth Settings V2Facebook V2 
- A facebook_v2block as defined below.
- forward_proxy_ strconvention 
- The convention used to determine the url of the request made. Possible values include NoProxy,Standard,Custom. Defaults toNoProxy.
- forward_proxy_ strcustom_ host_ header_ name 
- The name of the custom header containing the host of the request.
- forward_proxy_ strcustom_ scheme_ header_ name 
- The name of the custom header containing the scheme of the request.
- github_v2 LinuxFunction App Slot Auth Settings V2Github V2 
- A github_v2block as defined below.
- google_v2 LinuxFunction App Slot Auth Settings V2Google V2 
- A google_v2block as defined below.
- http_route_ strapi_ prefix 
- The prefix that should precede all the authentication and authorisation paths. Defaults to /.auth.
- microsoft_v2 LinuxFunction App Slot Auth Settings V2Microsoft V2 
- A microsoft_v2block as defined below.
- require_authentication bool
- Should the authentication flow be used for all requests.
- require_https bool
- Should HTTPS be required on connections? Defaults to true.
- runtime_version str
- The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to ~1.
- twitter_v2 LinuxFunction App Slot Auth Settings V2Twitter V2 
- A twitter_v2block as defined below.
- unauthenticated_action str
- The action to take for requests made without authentication. Possible values include RedirectToLoginPage,AllowAnonymous,Return401, andReturn403. Defaults toRedirectToLoginPage.
- login Property Map
- A loginblock as defined below.
- activeDirectory Property MapV2 
- An active_directory_v2block as defined below.
- appleV2 Property Map
- An apple_v2block as defined below.
- authEnabled Boolean
- Should the AuthV2 Settings be enabled. Defaults to false.
- azureStatic Property MapWeb App V2 
- An azure_static_web_app_v2block as defined below.
- configFile StringPath 
- The path to the App Auth settings. - Note: Relative Paths are evaluated from the Site Root directory. 
- customOidc List<Property Map>V2s 
- Zero or more custom_oidc_v2blocks as defined below.
- defaultProvider String
- The Default Authentication Provider to use when the - unauthenticated_actionis set to- RedirectToLoginPage. Possible values include:- apple,- azureactivedirectory,- facebook,- github,- google,- twitterand the- nameof your- custom_oidc_v2provider.- NOTE: Whilst any value will be accepted by the API for - default_provider, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or custom_oidc name) as it is used to build the auth endpoint URI.
- excludedPaths List<String>
- The paths which should be excluded from the - unauthenticated_actionwhen it is set to- RedirectToLoginPage.- NOTE: This list should be used instead of setting - WEBSITE_WARMUP_PATHin- app_settingsas it takes priority.
- facebookV2 Property Map
- A facebook_v2block as defined below.
- forwardProxy StringConvention 
- The convention used to determine the url of the request made. Possible values include NoProxy,Standard,Custom. Defaults toNoProxy.
- forwardProxy StringCustom Host Header Name 
- The name of the custom header containing the host of the request.
- forwardProxy StringCustom Scheme Header Name 
- The name of the custom header containing the scheme of the request.
- githubV2 Property Map
- A github_v2block as defined below.
- googleV2 Property Map
- A google_v2block as defined below.
- httpRoute StringApi Prefix 
- The prefix that should precede all the authentication and authorisation paths. Defaults to /.auth.
- microsoftV2 Property Map
- A microsoft_v2block as defined below.
- requireAuthentication Boolean
- Should the authentication flow be used for all requests.
- requireHttps Boolean
- Should HTTPS be required on connections? Defaults to true.
- runtimeVersion String
- The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to ~1.
- twitterV2 Property Map
- A twitter_v2block as defined below.
- unauthenticatedAction String
- The action to take for requests made without authentication. Possible values include RedirectToLoginPage,AllowAnonymous,Return401, andReturn403. Defaults toRedirectToLoginPage.
LinuxFunctionAppSlotAuthSettingsV2ActiveDirectoryV2, LinuxFunctionAppSlotAuthSettingsV2ActiveDirectoryV2Args                  
- ClientId string
- The ID of the Client to use to authenticate with Azure Active Directory.
- TenantAuth stringEndpoint 
- The Azure Tenant Endpoint for the Authenticating Tenant. e.g. - https://login.microsoftonline.com/{tenant-guid}/v2.0/- NOTE: Here is a list of possible authentication endpoints based on the cloud environment. Here is more information to better understand how to configure authentication for Azure App Service or Azure Functions. 
- AllowedApplications List<string>
- The list of allowed Applications for the Default Authorisation Policy.
- AllowedAudiences List<string>
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- AllowedGroups List<string>
- The list of allowed Group Names for the Default Authorisation Policy.
- AllowedIdentities List<string>
- The list of allowed Identities for the Default Authorisation Policy.
- ClientSecret stringCertificate Thumbprint 
- The thumbprint of the certificate used for signing purposes.
- ClientSecret stringSetting Name 
- The App Setting name that contains the client secret of the Client. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- JwtAllowed List<string>Client Applications 
- A list of Allowed Client Applications in the JWT Claim.
- JwtAllowed List<string>Groups 
- A list of Allowed Groups in the JWT Claim.
- LoginParameters Dictionary<string, string>
- A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
- WwwAuthentication boolDisabled 
- Should the www-authenticate provider should be omitted from the request? Defaults to false.
- ClientId string
- The ID of the Client to use to authenticate with Azure Active Directory.
- TenantAuth stringEndpoint 
- The Azure Tenant Endpoint for the Authenticating Tenant. e.g. - https://login.microsoftonline.com/{tenant-guid}/v2.0/- NOTE: Here is a list of possible authentication endpoints based on the cloud environment. Here is more information to better understand how to configure authentication for Azure App Service or Azure Functions. 
- AllowedApplications []string
- The list of allowed Applications for the Default Authorisation Policy.
- AllowedAudiences []string
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- AllowedGroups []string
- The list of allowed Group Names for the Default Authorisation Policy.
- AllowedIdentities []string
- The list of allowed Identities for the Default Authorisation Policy.
- ClientSecret stringCertificate Thumbprint 
- The thumbprint of the certificate used for signing purposes.
- ClientSecret stringSetting Name 
- The App Setting name that contains the client secret of the Client. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- JwtAllowed []stringClient Applications 
- A list of Allowed Client Applications in the JWT Claim.
- JwtAllowed []stringGroups 
- A list of Allowed Groups in the JWT Claim.
- LoginParameters map[string]string
- A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
- WwwAuthentication boolDisabled 
- Should the www-authenticate provider should be omitted from the request? Defaults to false.
- clientId String
- The ID of the Client to use to authenticate with Azure Active Directory.
- tenantAuth StringEndpoint 
- The Azure Tenant Endpoint for the Authenticating Tenant. e.g. - https://login.microsoftonline.com/{tenant-guid}/v2.0/- NOTE: Here is a list of possible authentication endpoints based on the cloud environment. Here is more information to better understand how to configure authentication for Azure App Service or Azure Functions. 
- allowedApplications List<String>
- The list of allowed Applications for the Default Authorisation Policy.
- allowedAudiences List<String>
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- allowedGroups List<String>
- The list of allowed Group Names for the Default Authorisation Policy.
- allowedIdentities List<String>
- The list of allowed Identities for the Default Authorisation Policy.
- clientSecret StringCertificate Thumbprint 
- The thumbprint of the certificate used for signing purposes.
- clientSecret StringSetting Name 
- The App Setting name that contains the client secret of the Client. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- jwtAllowed List<String>Client Applications 
- A list of Allowed Client Applications in the JWT Claim.
- jwtAllowed List<String>Groups 
- A list of Allowed Groups in the JWT Claim.
- loginParameters Map<String,String>
- A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
- wwwAuthentication BooleanDisabled 
- Should the www-authenticate provider should be omitted from the request? Defaults to false.
- clientId string
- The ID of the Client to use to authenticate with Azure Active Directory.
- tenantAuth stringEndpoint 
- The Azure Tenant Endpoint for the Authenticating Tenant. e.g. - https://login.microsoftonline.com/{tenant-guid}/v2.0/- NOTE: Here is a list of possible authentication endpoints based on the cloud environment. Here is more information to better understand how to configure authentication for Azure App Service or Azure Functions. 
- allowedApplications string[]
- The list of allowed Applications for the Default Authorisation Policy.
- allowedAudiences string[]
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- allowedGroups string[]
- The list of allowed Group Names for the Default Authorisation Policy.
- allowedIdentities string[]
- The list of allowed Identities for the Default Authorisation Policy.
- clientSecret stringCertificate Thumbprint 
- The thumbprint of the certificate used for signing purposes.
- clientSecret stringSetting Name 
- The App Setting name that contains the client secret of the Client. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- jwtAllowed string[]Client Applications 
- A list of Allowed Client Applications in the JWT Claim.
- jwtAllowed string[]Groups 
- A list of Allowed Groups in the JWT Claim.
- loginParameters {[key: string]: string}
- A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
- wwwAuthentication booleanDisabled 
- Should the www-authenticate provider should be omitted from the request? Defaults to false.
- client_id str
- The ID of the Client to use to authenticate with Azure Active Directory.
- tenant_auth_ strendpoint 
- The Azure Tenant Endpoint for the Authenticating Tenant. e.g. - https://login.microsoftonline.com/{tenant-guid}/v2.0/- NOTE: Here is a list of possible authentication endpoints based on the cloud environment. Here is more information to better understand how to configure authentication for Azure App Service or Azure Functions. 
- allowed_applications Sequence[str]
- The list of allowed Applications for the Default Authorisation Policy.
- allowed_audiences Sequence[str]
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- allowed_groups Sequence[str]
- The list of allowed Group Names for the Default Authorisation Policy.
- allowed_identities Sequence[str]
- The list of allowed Identities for the Default Authorisation Policy.
- client_secret_ strcertificate_ thumbprint 
- The thumbprint of the certificate used for signing purposes.
- client_secret_ strsetting_ name 
- The App Setting name that contains the client secret of the Client. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- jwt_allowed_ Sequence[str]client_ applications 
- A list of Allowed Client Applications in the JWT Claim.
- jwt_allowed_ Sequence[str]groups 
- A list of Allowed Groups in the JWT Claim.
- login_parameters Mapping[str, str]
- A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
- www_authentication_ booldisabled 
- Should the www-authenticate provider should be omitted from the request? Defaults to false.
- clientId String
- The ID of the Client to use to authenticate with Azure Active Directory.
- tenantAuth StringEndpoint 
- The Azure Tenant Endpoint for the Authenticating Tenant. e.g. - https://login.microsoftonline.com/{tenant-guid}/v2.0/- NOTE: Here is a list of possible authentication endpoints based on the cloud environment. Here is more information to better understand how to configure authentication for Azure App Service or Azure Functions. 
- allowedApplications List<String>
- The list of allowed Applications for the Default Authorisation Policy.
- allowedAudiences List<String>
- Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- allowedGroups List<String>
- The list of allowed Group Names for the Default Authorisation Policy.
- allowedIdentities List<String>
- The list of allowed Identities for the Default Authorisation Policy.
- clientSecret StringCertificate Thumbprint 
- The thumbprint of the certificate used for signing purposes.
- clientSecret StringSetting Name 
- The App Setting name that contains the client secret of the Client. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- jwtAllowed List<String>Client Applications 
- A list of Allowed Client Applications in the JWT Claim.
- jwtAllowed List<String>Groups 
- A list of Allowed Groups in the JWT Claim.
- loginParameters Map<String>
- A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
- wwwAuthentication BooleanDisabled 
- Should the www-authenticate provider should be omitted from the request? Defaults to false.
LinuxFunctionAppSlotAuthSettingsV2AppleV2, LinuxFunctionAppSlotAuthSettingsV2AppleV2Args                
- ClientId string
- The OpenID Connect Client ID for the Apple web application.
- ClientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for Apple Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- LoginScopes List<string>
- A list of Login Scopes provided by this Authentication Provider. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- ClientId string
- The OpenID Connect Client ID for the Apple web application.
- ClientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for Apple Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- LoginScopes []string
- A list of Login Scopes provided by this Authentication Provider. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- clientId String
- The OpenID Connect Client ID for the Apple web application.
- clientSecret StringSetting Name 
- The app setting name that contains the - client_secretvalue used for Apple Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- loginScopes List<String>
- A list of Login Scopes provided by this Authentication Provider. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- clientId string
- The OpenID Connect Client ID for the Apple web application.
- clientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for Apple Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- loginScopes string[]
- A list of Login Scopes provided by this Authentication Provider. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- client_id str
- The OpenID Connect Client ID for the Apple web application.
- client_secret_ strsetting_ name 
- The app setting name that contains the - client_secretvalue used for Apple Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- login_scopes Sequence[str]
- A list of Login Scopes provided by this Authentication Provider. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
- clientId String
- The OpenID Connect Client ID for the Apple web application.
- clientSecret StringSetting Name 
- The app setting name that contains the - client_secretvalue used for Apple Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- loginScopes List<String>
- A list of Login Scopes provided by this Authentication Provider. - NOTE: This is configured on the Authentication Provider side and is Read Only here. 
LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2, LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2Args                      
- ClientId string
- The ID of the Client to use to authenticate with Azure Static Web App Authentication.
- ClientId string
- The ID of the Client to use to authenticate with Azure Static Web App Authentication.
- clientId String
- The ID of the Client to use to authenticate with Azure Static Web App Authentication.
- clientId string
- The ID of the Client to use to authenticate with Azure Static Web App Authentication.
- client_id str
- The ID of the Client to use to authenticate with Azure Static Web App Authentication.
- clientId String
- The ID of the Client to use to authenticate with Azure Static Web App Authentication.
LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2, LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2Args                  
- ClientId string
- The ID of the Client to use to authenticate with the Custom OIDC.
- Name string
- The name of the Custom OIDC Authentication Provider. - NOTE: An - app_settingmatching this value in upper case with the suffix of- _PROVIDER_AUTHENTICATION_SECRETis required. e.g.- MYOIDC_PROVIDER_AUTHENTICATION_SECRETfor a value of- myoidc.
- OpenidConfiguration stringEndpoint 
- The app setting name that contains the client_secretvalue used for the Custom OIDC Login.
- string
- The endpoint to make the Authorisation Request as supplied by openid_configuration_endpointresponse.
- CertificationUri string
- The endpoint that provides the keys necessary to validate the token as supplied by openid_configuration_endpointresponse.
- ClientCredential stringMethod 
- The Client Credential Method used.
- ClientSecret stringSetting Name 
- The App Setting name that contains the secret for this Custom OIDC Client. This is generated from nameabove and suffixed with_PROVIDER_AUTHENTICATION_SECRET.
- IssuerEndpoint string
- The endpoint that issued the Token as supplied by openid_configuration_endpointresponse.
- NameClaim stringType 
- The name of the claim that contains the users name.
- Scopes List<string>
- The list of the scopes that should be requested while authenticating.
- TokenEndpoint string
- The endpoint used to request a Token as supplied by openid_configuration_endpointresponse.
- ClientId string
- The ID of the Client to use to authenticate with the Custom OIDC.
- Name string
- The name of the Custom OIDC Authentication Provider. - NOTE: An - app_settingmatching this value in upper case with the suffix of- _PROVIDER_AUTHENTICATION_SECRETis required. e.g.- MYOIDC_PROVIDER_AUTHENTICATION_SECRETfor a value of- myoidc.
- OpenidConfiguration stringEndpoint 
- The app setting name that contains the client_secretvalue used for the Custom OIDC Login.
- string
- The endpoint to make the Authorisation Request as supplied by openid_configuration_endpointresponse.
- CertificationUri string
- The endpoint that provides the keys necessary to validate the token as supplied by openid_configuration_endpointresponse.
- ClientCredential stringMethod 
- The Client Credential Method used.
- ClientSecret stringSetting Name 
- The App Setting name that contains the secret for this Custom OIDC Client. This is generated from nameabove and suffixed with_PROVIDER_AUTHENTICATION_SECRET.
- IssuerEndpoint string
- The endpoint that issued the Token as supplied by openid_configuration_endpointresponse.
- NameClaim stringType 
- The name of the claim that contains the users name.
- Scopes []string
- The list of the scopes that should be requested while authenticating.
- TokenEndpoint string
- The endpoint used to request a Token as supplied by openid_configuration_endpointresponse.
- clientId String
- The ID of the Client to use to authenticate with the Custom OIDC.
- name String
- The name of the Custom OIDC Authentication Provider. - NOTE: An - app_settingmatching this value in upper case with the suffix of- _PROVIDER_AUTHENTICATION_SECRETis required. e.g.- MYOIDC_PROVIDER_AUTHENTICATION_SECRETfor a value of- myoidc.
- openidConfiguration StringEndpoint 
- The app setting name that contains the client_secretvalue used for the Custom OIDC Login.
- String
- The endpoint to make the Authorisation Request as supplied by openid_configuration_endpointresponse.
- certificationUri String
- The endpoint that provides the keys necessary to validate the token as supplied by openid_configuration_endpointresponse.
- clientCredential StringMethod 
- The Client Credential Method used.
- clientSecret StringSetting Name 
- The App Setting name that contains the secret for this Custom OIDC Client. This is generated from nameabove and suffixed with_PROVIDER_AUTHENTICATION_SECRET.
- issuerEndpoint String
- The endpoint that issued the Token as supplied by openid_configuration_endpointresponse.
- nameClaim StringType 
- The name of the claim that contains the users name.
- scopes List<String>
- The list of the scopes that should be requested while authenticating.
- tokenEndpoint String
- The endpoint used to request a Token as supplied by openid_configuration_endpointresponse.
- clientId string
- The ID of the Client to use to authenticate with the Custom OIDC.
- name string
- The name of the Custom OIDC Authentication Provider. - NOTE: An - app_settingmatching this value in upper case with the suffix of- _PROVIDER_AUTHENTICATION_SECRETis required. e.g.- MYOIDC_PROVIDER_AUTHENTICATION_SECRETfor a value of- myoidc.
- openidConfiguration stringEndpoint 
- The app setting name that contains the client_secretvalue used for the Custom OIDC Login.
- string
- The endpoint to make the Authorisation Request as supplied by openid_configuration_endpointresponse.
- certificationUri string
- The endpoint that provides the keys necessary to validate the token as supplied by openid_configuration_endpointresponse.
- clientCredential stringMethod 
- The Client Credential Method used.
- clientSecret stringSetting Name 
- The App Setting name that contains the secret for this Custom OIDC Client. This is generated from nameabove and suffixed with_PROVIDER_AUTHENTICATION_SECRET.
- issuerEndpoint string
- The endpoint that issued the Token as supplied by openid_configuration_endpointresponse.
- nameClaim stringType 
- The name of the claim that contains the users name.
- scopes string[]
- The list of the scopes that should be requested while authenticating.
- tokenEndpoint string
- The endpoint used to request a Token as supplied by openid_configuration_endpointresponse.
- client_id str
- The ID of the Client to use to authenticate with the Custom OIDC.
- name str
- The name of the Custom OIDC Authentication Provider. - NOTE: An - app_settingmatching this value in upper case with the suffix of- _PROVIDER_AUTHENTICATION_SECRETis required. e.g.- MYOIDC_PROVIDER_AUTHENTICATION_SECRETfor a value of- myoidc.
- openid_configuration_ strendpoint 
- The app setting name that contains the client_secretvalue used for the Custom OIDC Login.
- str
- The endpoint to make the Authorisation Request as supplied by openid_configuration_endpointresponse.
- certification_uri str
- The endpoint that provides the keys necessary to validate the token as supplied by openid_configuration_endpointresponse.
- client_credential_ strmethod 
- The Client Credential Method used.
- client_secret_ strsetting_ name 
- The App Setting name that contains the secret for this Custom OIDC Client. This is generated from nameabove and suffixed with_PROVIDER_AUTHENTICATION_SECRET.
- issuer_endpoint str
- The endpoint that issued the Token as supplied by openid_configuration_endpointresponse.
- name_claim_ strtype 
- The name of the claim that contains the users name.
- scopes Sequence[str]
- The list of the scopes that should be requested while authenticating.
- token_endpoint str
- The endpoint used to request a Token as supplied by openid_configuration_endpointresponse.
- clientId String
- The ID of the Client to use to authenticate with the Custom OIDC.
- name String
- The name of the Custom OIDC Authentication Provider. - NOTE: An - app_settingmatching this value in upper case with the suffix of- _PROVIDER_AUTHENTICATION_SECRETis required. e.g.- MYOIDC_PROVIDER_AUTHENTICATION_SECRETfor a value of- myoidc.
- openidConfiguration StringEndpoint 
- The app setting name that contains the client_secretvalue used for the Custom OIDC Login.
- String
- The endpoint to make the Authorisation Request as supplied by openid_configuration_endpointresponse.
- certificationUri String
- The endpoint that provides the keys necessary to validate the token as supplied by openid_configuration_endpointresponse.
- clientCredential StringMethod 
- The Client Credential Method used.
- clientSecret StringSetting Name 
- The App Setting name that contains the secret for this Custom OIDC Client. This is generated from nameabove and suffixed with_PROVIDER_AUTHENTICATION_SECRET.
- issuerEndpoint String
- The endpoint that issued the Token as supplied by openid_configuration_endpointresponse.
- nameClaim StringType 
- The name of the claim that contains the users name.
- scopes List<String>
- The list of the scopes that should be requested while authenticating.
- tokenEndpoint String
- The endpoint used to request a Token as supplied by openid_configuration_endpointresponse.
LinuxFunctionAppSlotAuthSettingsV2FacebookV2, LinuxFunctionAppSlotAuthSettingsV2FacebookV2Args                
- AppId string
- The App ID of the Facebook app used for login.
- AppSecret stringSetting Name 
- The app setting name that contains the - app_secretvalue used for Facebook Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- GraphApi stringVersion 
- The version of the Facebook API to be used while logging in.
- LoginScopes List<string>
- The list of scopes that should be requested as part of Facebook Login authentication.
- AppId string
- The App ID of the Facebook app used for login.
- AppSecret stringSetting Name 
- The app setting name that contains the - app_secretvalue used for Facebook Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- GraphApi stringVersion 
- The version of the Facebook API to be used while logging in.
- LoginScopes []string
- The list of scopes that should be requested as part of Facebook Login authentication.
- appId String
- The App ID of the Facebook app used for login.
- appSecret StringSetting Name 
- The app setting name that contains the - app_secretvalue used for Facebook Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- graphApi StringVersion 
- The version of the Facebook API to be used while logging in.
- loginScopes List<String>
- The list of scopes that should be requested as part of Facebook Login authentication.
- appId string
- The App ID of the Facebook app used for login.
- appSecret stringSetting Name 
- The app setting name that contains the - app_secretvalue used for Facebook Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- graphApi stringVersion 
- The version of the Facebook API to be used while logging in.
- loginScopes string[]
- The list of scopes that should be requested as part of Facebook Login authentication.
- app_id str
- The App ID of the Facebook app used for login.
- app_secret_ strsetting_ name 
- The app setting name that contains the - app_secretvalue used for Facebook Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- graph_api_ strversion 
- The version of the Facebook API to be used while logging in.
- login_scopes Sequence[str]
- The list of scopes that should be requested as part of Facebook Login authentication.
- appId String
- The App ID of the Facebook app used for login.
- appSecret StringSetting Name 
- The app setting name that contains the - app_secretvalue used for Facebook Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- graphApi StringVersion 
- The version of the Facebook API to be used while logging in.
- loginScopes List<String>
- The list of scopes that should be requested as part of Facebook Login authentication.
LinuxFunctionAppSlotAuthSettingsV2GithubV2, LinuxFunctionAppSlotAuthSettingsV2GithubV2Args                
- ClientId string
- The ID of the GitHub app used for login..
- ClientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for GitHub Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- LoginScopes List<string>
- The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
- ClientId string
- The ID of the GitHub app used for login..
- ClientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for GitHub Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- LoginScopes []string
- The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
- clientId String
- The ID of the GitHub app used for login..
- clientSecret StringSetting Name 
- The app setting name that contains the - client_secretvalue used for GitHub Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- loginScopes List<String>
- The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
- clientId string
- The ID of the GitHub app used for login..
- clientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for GitHub Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- loginScopes string[]
- The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
- client_id str
- The ID of the GitHub app used for login..
- client_secret_ strsetting_ name 
- The app setting name that contains the - client_secretvalue used for GitHub Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- login_scopes Sequence[str]
- The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
- clientId String
- The ID of the GitHub app used for login..
- clientSecret StringSetting Name 
- The app setting name that contains the - client_secretvalue used for GitHub Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- loginScopes List<String>
- The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
LinuxFunctionAppSlotAuthSettingsV2GoogleV2, LinuxFunctionAppSlotAuthSettingsV2GoogleV2Args                
- ClientId string
- The OpenID Connect Client ID for the Google web application.
- ClientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for Google Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- AllowedAudiences List<string>
- Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
- LoginScopes List<string>
- The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
- ClientId string
- The OpenID Connect Client ID for the Google web application.
- ClientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for Google Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- AllowedAudiences []string
- Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
- LoginScopes []string
- The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
- clientId String
- The OpenID Connect Client ID for the Google web application.
- clientSecret StringSetting Name 
- The app setting name that contains the - client_secretvalue used for Google Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowedAudiences List<String>
- Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
- loginScopes List<String>
- The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
- clientId string
- The OpenID Connect Client ID for the Google web application.
- clientSecret stringSetting Name 
- The app setting name that contains the - client_secretvalue used for Google Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowedAudiences string[]
- Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
- loginScopes string[]
- The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
- client_id str
- The OpenID Connect Client ID for the Google web application.
- client_secret_ strsetting_ name 
- The app setting name that contains the - client_secretvalue used for Google Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowed_audiences Sequence[str]
- Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
- login_scopes Sequence[str]
- The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
- clientId String
- The OpenID Connect Client ID for the Google web application.
- clientSecret StringSetting Name 
- The app setting name that contains the - client_secretvalue used for Google Login.- !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowedAudiences List<String>
- Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
- loginScopes List<String>
- The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
LinuxFunctionAppSlotAuthSettingsV2Login, LinuxFunctionAppSlotAuthSettingsV2LoginArgs              
- AllowedExternal List<string>Redirect Urls 
- External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends. - Note: URLs within the current domain are always implicitly allowed. 
- string
- The method by which cookies expire. Possible values include: FixedTime, andIdentityProviderDerived. Defaults toFixedTime.
- string
- The time after the request is made when the session cookie should expire. Defaults to 08:00:00.
- LogoutEndpoint string
- The endpoint to which logout requests should be made.
- NonceExpiration stringTime 
- The time after the request is made when the nonce should expire. Defaults to 00:05:00.
- PreserveUrl boolFragments For Logins 
- Should the fragments from the request be preserved after the login request is made. Defaults to false.
- TokenRefresh doubleExtension Time 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- TokenStore boolEnabled 
- Should the Token Store configuration Enabled. Defaults to false
- TokenStore stringPath 
- The directory path in the App Filesystem in which the tokens will be stored.
- TokenStore stringSas Setting Name 
- The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
- ValidateNonce bool
- Should the nonce be validated while completing the login flow. Defaults to true.
- AllowedExternal []stringRedirect Urls 
- External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends. - Note: URLs within the current domain are always implicitly allowed. 
- string
- The method by which cookies expire. Possible values include: FixedTime, andIdentityProviderDerived. Defaults toFixedTime.
- string
- The time after the request is made when the session cookie should expire. Defaults to 08:00:00.
- LogoutEndpoint string
- The endpoint to which logout requests should be made.
- NonceExpiration stringTime 
- The time after the request is made when the nonce should expire. Defaults to 00:05:00.
- PreserveUrl boolFragments For Logins 
- Should the fragments from the request be preserved after the login request is made. Defaults to false.
- TokenRefresh float64Extension Time 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- TokenStore boolEnabled 
- Should the Token Store configuration Enabled. Defaults to false
- TokenStore stringPath 
- The directory path in the App Filesystem in which the tokens will be stored.
- TokenStore stringSas Setting Name 
- The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
- ValidateNonce bool
- Should the nonce be validated while completing the login flow. Defaults to true.
- allowedExternal List<String>Redirect Urls 
- External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends. - Note: URLs within the current domain are always implicitly allowed. 
- String
- The method by which cookies expire. Possible values include: FixedTime, andIdentityProviderDerived. Defaults toFixedTime.
- String
- The time after the request is made when the session cookie should expire. Defaults to 08:00:00.
- logoutEndpoint String
- The endpoint to which logout requests should be made.
- nonceExpiration StringTime 
- The time after the request is made when the nonce should expire. Defaults to 00:05:00.
- preserveUrl BooleanFragments For Logins 
- Should the fragments from the request be preserved after the login request is made. Defaults to false.
- tokenRefresh DoubleExtension Time 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- tokenStore BooleanEnabled 
- Should the Token Store configuration Enabled. Defaults to false
- tokenStore StringPath 
- The directory path in the App Filesystem in which the tokens will be stored.
- tokenStore StringSas Setting Name 
- The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
- validateNonce Boolean
- Should the nonce be validated while completing the login flow. Defaults to true.
- allowedExternal string[]Redirect Urls 
- External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends. - Note: URLs within the current domain are always implicitly allowed. 
- string
- The method by which cookies expire. Possible values include: FixedTime, andIdentityProviderDerived. Defaults toFixedTime.
- string
- The time after the request is made when the session cookie should expire. Defaults to 08:00:00.
- logoutEndpoint string
- The endpoint to which logout requests should be made.
- nonceExpiration stringTime 
- The time after the request is made when the nonce should expire. Defaults to 00:05:00.
- preserveUrl booleanFragments For Logins 
- Should the fragments from the request be preserved after the login request is made. Defaults to false.
- tokenRefresh numberExtension Time 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- tokenStore booleanEnabled 
- Should the Token Store configuration Enabled. Defaults to false
- tokenStore stringPath 
- The directory path in the App Filesystem in which the tokens will be stored.
- tokenStore stringSas Setting Name 
- The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
- validateNonce boolean
- Should the nonce be validated while completing the login flow. Defaults to true.
- allowed_external_ Sequence[str]redirect_ urls 
- External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends. - Note: URLs within the current domain are always implicitly allowed. 
- str
- The method by which cookies expire. Possible values include: FixedTime, andIdentityProviderDerived. Defaults toFixedTime.
- str
- The time after the request is made when the session cookie should expire. Defaults to 08:00:00.
- logout_endpoint str
- The endpoint to which logout requests should be made.
- nonce_expiration_ strtime 
- The time after the request is made when the nonce should expire. Defaults to 00:05:00.
- preserve_url_ boolfragments_ for_ logins 
- Should the fragments from the request be preserved after the login request is made. Defaults to false.
- token_refresh_ floatextension_ time 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- token_store_ boolenabled 
- Should the Token Store configuration Enabled. Defaults to false
- token_store_ strpath 
- The directory path in the App Filesystem in which the tokens will be stored.
- token_store_ strsas_ setting_ name 
- The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
- validate_nonce bool
- Should the nonce be validated while completing the login flow. Defaults to true.
- allowedExternal List<String>Redirect Urls 
- External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends. - Note: URLs within the current domain are always implicitly allowed. 
- String
- The method by which cookies expire. Possible values include: FixedTime, andIdentityProviderDerived. Defaults toFixedTime.
- String
- The time after the request is made when the session cookie should expire. Defaults to 08:00:00.
- logoutEndpoint String
- The endpoint to which logout requests should be made.
- nonceExpiration StringTime 
- The time after the request is made when the nonce should expire. Defaults to 00:05:00.
- preserveUrl BooleanFragments For Logins 
- Should the fragments from the request be preserved after the login request is made. Defaults to false.
- tokenRefresh NumberExtension Time 
- The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to 72hours.
- tokenStore BooleanEnabled 
- Should the Token Store configuration Enabled. Defaults to false
- tokenStore StringPath 
- The directory path in the App Filesystem in which the tokens will be stored.
- tokenStore StringSas Setting Name 
- The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
- validateNonce Boolean
- Should the nonce be validated while completing the login flow. Defaults to true.
LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2, LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2Args                
- ClientId string
- The OAuth 2.0 client ID that was created for the app used for authentication.
- ClientSecret stringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- AllowedAudiences List<string>
- Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
- LoginScopes List<string>
- The list of Login scopes that should be requested as part of Microsoft Account authentication.
- ClientId string
- The OAuth 2.0 client ID that was created for the app used for authentication.
- ClientSecret stringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- AllowedAudiences []string
- Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
- LoginScopes []string
- The list of Login scopes that should be requested as part of Microsoft Account authentication.
- clientId String
- The OAuth 2.0 client ID that was created for the app used for authentication.
- clientSecret StringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowedAudiences List<String>
- Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
- loginScopes List<String>
- The list of Login scopes that should be requested as part of Microsoft Account authentication.
- clientId string
- The OAuth 2.0 client ID that was created for the app used for authentication.
- clientSecret stringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowedAudiences string[]
- Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
- loginScopes string[]
- The list of Login scopes that should be requested as part of Microsoft Account authentication.
- client_id str
- The OAuth 2.0 client ID that was created for the app used for authentication.
- client_secret_ strsetting_ name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowed_audiences Sequence[str]
- Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
- login_scopes Sequence[str]
- The list of Login scopes that should be requested as part of Microsoft Account authentication.
- clientId String
- The OAuth 2.0 client ID that was created for the app used for authentication.
- clientSecret StringSetting Name 
- The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- allowedAudiences List<String>
- Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
- loginScopes List<String>
- The list of Login scopes that should be requested as part of Microsoft Account authentication.
LinuxFunctionAppSlotAuthSettingsV2TwitterV2, LinuxFunctionAppSlotAuthSettingsV2TwitterV2Args                
- ConsumerKey string
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- ConsumerSecret stringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- ConsumerKey string
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- ConsumerSecret stringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- consumerKey String
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumerSecret StringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- consumerKey string
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumerSecret stringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- consumer_key str
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumer_secret_ strsetting_ name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
- consumerKey String
- The OAuth 1.0a consumer key of the Twitter application used for sign-in.
- consumerSecret StringSetting Name 
- The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. - !> NOTE: A setting with this name must exist in - app_settingsto function correctly.
LinuxFunctionAppSlotBackup, LinuxFunctionAppSlotBackupArgs          
- Name string
- The name which should be used for this Backup.
- Schedule
LinuxFunction App Slot Backup Schedule 
- a scheduleblock as detailed below.
- StorageAccount stringUrl 
- The SAS URL to the container.
- Enabled bool
- Should this backup job be enabled? Defaults to true.
- Name string
- The name which should be used for this Backup.
- Schedule
LinuxFunction App Slot Backup Schedule 
- a scheduleblock as detailed below.
- StorageAccount stringUrl 
- The SAS URL to the container.
- Enabled bool
- Should this backup job be enabled? Defaults to true.
- name String
- The name which should be used for this Backup.
- schedule
LinuxFunction App Slot Backup Schedule 
- a scheduleblock as detailed below.
- storageAccount StringUrl 
- The SAS URL to the container.
- enabled Boolean
- Should this backup job be enabled? Defaults to true.
- name string
- The name which should be used for this Backup.
- schedule
LinuxFunction App Slot Backup Schedule 
- a scheduleblock as detailed below.
- storageAccount stringUrl 
- The SAS URL to the container.
- enabled boolean
- Should this backup job be enabled? Defaults to true.
- name str
- The name which should be used for this Backup.
- schedule
LinuxFunction App Slot Backup Schedule 
- a scheduleblock as detailed below.
- storage_account_ strurl 
- The SAS URL to the container.
- enabled bool
- Should this backup job be enabled? Defaults to true.
- name String
- The name which should be used for this Backup.
- schedule Property Map
- a scheduleblock as detailed below.
- storageAccount StringUrl 
- The SAS URL to the container.
- enabled Boolean
- Should this backup job be enabled? Defaults to true.
LinuxFunctionAppSlotBackupSchedule, LinuxFunctionAppSlotBackupScheduleArgs            
- FrequencyInterval int
- How often the backup should be executed (e.g. for weekly backup, this should be set to - 7and- frequency_unitshould be set to- Day).- NOTE: Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values. 
- FrequencyUnit string
- The unit of time for how often the backup should take place. Possible values include: DayandHour.
- KeepAt boolLeast One Backup 
- Should the service keep at least one backup, regardless of age of backup. Defaults to false.
- LastExecution stringTime 
- The time the backup was last attempted.
- RetentionPeriod intDays 
- After how many days backups should be deleted. Defaults to 30.
- StartTime string
- When the schedule should start working in RFC-3339 format.
- FrequencyInterval int
- How often the backup should be executed (e.g. for weekly backup, this should be set to - 7and- frequency_unitshould be set to- Day).- NOTE: Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values. 
- FrequencyUnit string
- The unit of time for how often the backup should take place. Possible values include: DayandHour.
- KeepAt boolLeast One Backup 
- Should the service keep at least one backup, regardless of age of backup. Defaults to false.
- LastExecution stringTime 
- The time the backup was last attempted.
- RetentionPeriod intDays 
- After how many days backups should be deleted. Defaults to 30.
- StartTime string
- When the schedule should start working in RFC-3339 format.
- frequencyInterval Integer
- How often the backup should be executed (e.g. for weekly backup, this should be set to - 7and- frequency_unitshould be set to- Day).- NOTE: Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values. 
- frequencyUnit String
- The unit of time for how often the backup should take place. Possible values include: DayandHour.
- keepAt BooleanLeast One Backup 
- Should the service keep at least one backup, regardless of age of backup. Defaults to false.
- lastExecution StringTime 
- The time the backup was last attempted.
- retentionPeriod IntegerDays 
- After how many days backups should be deleted. Defaults to 30.
- startTime String
- When the schedule should start working in RFC-3339 format.
- frequencyInterval number
- How often the backup should be executed (e.g. for weekly backup, this should be set to - 7and- frequency_unitshould be set to- Day).- NOTE: Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values. 
- frequencyUnit string
- The unit of time for how often the backup should take place. Possible values include: DayandHour.
- keepAt booleanLeast One Backup 
- Should the service keep at least one backup, regardless of age of backup. Defaults to false.
- lastExecution stringTime 
- The time the backup was last attempted.
- retentionPeriod numberDays 
- After how many days backups should be deleted. Defaults to 30.
- startTime string
- When the schedule should start working in RFC-3339 format.
- frequency_interval int
- How often the backup should be executed (e.g. for weekly backup, this should be set to - 7and- frequency_unitshould be set to- Day).- NOTE: Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values. 
- frequency_unit str
- The unit of time for how often the backup should take place. Possible values include: DayandHour.
- keep_at_ boolleast_ one_ backup 
- Should the service keep at least one backup, regardless of age of backup. Defaults to false.
- last_execution_ strtime 
- The time the backup was last attempted.
- retention_period_ intdays 
- After how many days backups should be deleted. Defaults to 30.
- start_time str
- When the schedule should start working in RFC-3339 format.
- frequencyInterval Number
- How often the backup should be executed (e.g. for weekly backup, this should be set to - 7and- frequency_unitshould be set to- Day).- NOTE: Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values. 
- frequencyUnit String
- The unit of time for how often the backup should take place. Possible values include: DayandHour.
- keepAt BooleanLeast One Backup 
- Should the service keep at least one backup, regardless of age of backup. Defaults to false.
- lastExecution StringTime 
- The time the backup was last attempted.
- retentionPeriod NumberDays 
- After how many days backups should be deleted. Defaults to 30.
- startTime String
- When the schedule should start working in RFC-3339 format.
LinuxFunctionAppSlotConnectionString, LinuxFunctionAppSlotConnectionStringArgs            
LinuxFunctionAppSlotIdentity, LinuxFunctionAppSlotIdentityArgs          
- Type string
- Specifies the type of Managed Service Identity that should be configured on this Linux Function App Slot. Possible values are SystemAssigned,UserAssigned,SystemAssigned, UserAssigned(to enable both).
- IdentityIds List<string>
- A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App Slot. - NOTE: This is required when - typeis set to- UserAssignedor- SystemAssigned, UserAssigned.
- PrincipalId string
- The Principal ID associated with this Managed Service Identity.
- TenantId string
- The Tenant ID associated with this Managed Service Identity.
- Type string
- Specifies the type of Managed Service Identity that should be configured on this Linux Function App Slot. Possible values are SystemAssigned,UserAssigned,SystemAssigned, UserAssigned(to enable both).
- IdentityIds []string
- A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App Slot. - NOTE: This is required when - typeis set to- UserAssignedor- SystemAssigned, UserAssigned.
- PrincipalId string
- The Principal ID associated with this Managed Service Identity.
- TenantId string
- The Tenant ID associated with this Managed Service Identity.
- type String
- Specifies the type of Managed Service Identity that should be configured on this Linux Function App Slot. Possible values are SystemAssigned,UserAssigned,SystemAssigned, UserAssigned(to enable both).
- identityIds List<String>
- A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App Slot. - NOTE: This is required when - typeis set to- UserAssignedor- SystemAssigned, UserAssigned.
- principalId String
- The Principal ID associated with this Managed Service Identity.
- tenantId String
- The Tenant ID associated with this Managed Service Identity.
- type string
- Specifies the type of Managed Service Identity that should be configured on this Linux Function App Slot. Possible values are SystemAssigned,UserAssigned,SystemAssigned, UserAssigned(to enable both).
- identityIds string[]
- A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App Slot. - NOTE: This is required when - typeis set to- UserAssignedor- SystemAssigned, UserAssigned.
- principalId string
- The Principal ID associated with this Managed Service Identity.
- tenantId string
- The Tenant ID associated with this Managed Service Identity.
- type str
- Specifies the type of Managed Service Identity that should be configured on this Linux Function App Slot. Possible values are SystemAssigned,UserAssigned,SystemAssigned, UserAssigned(to enable both).
- identity_ids Sequence[str]
- A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App Slot. - NOTE: This is required when - typeis set to- UserAssignedor- SystemAssigned, UserAssigned.
- principal_id str
- The Principal ID associated with this Managed Service Identity.
- tenant_id str
- The Tenant ID associated with this Managed Service Identity.
- type String
- Specifies the type of Managed Service Identity that should be configured on this Linux Function App Slot. Possible values are SystemAssigned,UserAssigned,SystemAssigned, UserAssigned(to enable both).
- identityIds List<String>
- A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App Slot. - NOTE: This is required when - typeis set to- UserAssignedor- SystemAssigned, UserAssigned.
- principalId String
- The Principal ID associated with this Managed Service Identity.
- tenantId String
- The Tenant ID associated with this Managed Service Identity.
LinuxFunctionAppSlotSiteConfig, LinuxFunctionAppSlotSiteConfigArgs            
- AlwaysOn bool
- If this Linux Web App is Always On enabled. Defaults to false.
- ApiDefinition stringUrl 
- The URL of the API definition that describes this Linux Function App.
- ApiManagement stringApi Id 
- The ID of the API Management API for this Linux Function App.
- AppCommand stringLine 
- The program and any arguments used to launch this app via the command line. (Example node myapp.js).
- AppScale intLimit 
- The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
- AppService LinuxLogs Function App Slot Site Config App Service Logs 
- an app_service_logsblock as detailed below.
- ApplicationInsights stringConnection String 
- The Connection String for linking the Linux Function App to Application Insights.
- ApplicationInsights stringKey 
- The Instrumentation Key for connecting the Linux Function App to Application Insights.
- ApplicationStack LinuxFunction App Slot Site Config Application Stack 
- an application_stackblock as detailed below.
- AutoSwap stringSlot Name 
- The name of the slot to automatically swap with when this slot is successfully deployed.
- ContainerRegistry stringManaged Identity Client Id 
- The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
- ContainerRegistry boolUse Managed Identity 
- Should connections for Azure Container Registry use Managed Identity.
- Cors
LinuxFunction App Slot Site Config Cors 
- a corsblock as detailed below.
- DefaultDocuments List<string>
- Specifies a list of Default Documents for the Linux Web App.
- DetailedError boolLogging Enabled 
- Is detailed error logging enabled
- ElasticInstance intMinimum 
- The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
- FtpsState string
- State of FTP / FTPS service for this function app. Possible values include: AllAllowed,FtpsOnlyandDisabled. Defaults toDisabled.
- HealthCheck intEviction Time In Min 
- The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between 2and10. Defaults to0. Only valid in conjunction withhealth_check_path.
- HealthCheck stringPath 
- The path to be checked for this function app health.
- Http2Enabled bool
- Specifies if the HTTP2 protocol should be enabled. Defaults to false.
- IpRestriction stringDefault Action 
- The Default action for traffic that does not match any ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- IpRestrictions List<LinuxFunction App Slot Site Config Ip Restriction> 
- an ip_restrictionblock as detailed below.
- LinuxFx stringVersion 
- The Linux FX Version
- LoadBalancing stringMode 
- The Site load balancing mode. Possible values include: WeightedRoundRobin,LeastRequests,LeastResponseTime,WeightedTotalTraffic,RequestHash,PerSiteRoundRobin. Defaults toLeastRequestsif omitted.
- ManagedPipeline stringMode 
- The Managed Pipeline mode. Possible values include: Integrated,Classic. Defaults toIntegrated.
- MinimumTls stringVersion 
- The configures the minimum version of TLS required for SSL requests. Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- PreWarmed intInstance Count 
- The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
- RemoteDebugging boolEnabled 
- Should Remote Debugging be enabled. Defaults to false.
- RemoteDebugging stringVersion 
- The Remote Debugging Version. Currently only VS2022is supported.
- RuntimeScale boolMonitoring Enabled 
- Should Functions Runtime Scale Monitoring be enabled. - NOTE: Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1. 
- ScmIp stringRestriction Default Action 
- The Default action for traffic that does not match any scm_ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- ScmIp List<LinuxRestrictions Function App Slot Site Config Scm Ip Restriction> 
- a scm_ip_restrictionblock as detailed below.
- ScmMinimum stringTls Version 
- Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- ScmType string
- The SCM Type in use by the Linux Function App.
- ScmUse boolMain Ip Restriction 
- Should the Linux Function App ip_restrictionconfiguration be used for the SCM also.
- Use32BitWorker bool
- Should the Linux Web App use a 32-bit worker.
- VnetRoute boolAll Enabled 
- Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to false.
- WebsocketsEnabled bool
- Should Web Sockets be enabled. Defaults to false.
- WorkerCount int
- The number of Workers for this Linux Function App.
- AlwaysOn bool
- If this Linux Web App is Always On enabled. Defaults to false.
- ApiDefinition stringUrl 
- The URL of the API definition that describes this Linux Function App.
- ApiManagement stringApi Id 
- The ID of the API Management API for this Linux Function App.
- AppCommand stringLine 
- The program and any arguments used to launch this app via the command line. (Example node myapp.js).
- AppScale intLimit 
- The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
- AppService LinuxLogs Function App Slot Site Config App Service Logs 
- an app_service_logsblock as detailed below.
- ApplicationInsights stringConnection String 
- The Connection String for linking the Linux Function App to Application Insights.
- ApplicationInsights stringKey 
- The Instrumentation Key for connecting the Linux Function App to Application Insights.
- ApplicationStack LinuxFunction App Slot Site Config Application Stack 
- an application_stackblock as detailed below.
- AutoSwap stringSlot Name 
- The name of the slot to automatically swap with when this slot is successfully deployed.
- ContainerRegistry stringManaged Identity Client Id 
- The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
- ContainerRegistry boolUse Managed Identity 
- Should connections for Azure Container Registry use Managed Identity.
- Cors
LinuxFunction App Slot Site Config Cors 
- a corsblock as detailed below.
- DefaultDocuments []string
- Specifies a list of Default Documents for the Linux Web App.
- DetailedError boolLogging Enabled 
- Is detailed error logging enabled
- ElasticInstance intMinimum 
- The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
- FtpsState string
- State of FTP / FTPS service for this function app. Possible values include: AllAllowed,FtpsOnlyandDisabled. Defaults toDisabled.
- HealthCheck intEviction Time In Min 
- The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between 2and10. Defaults to0. Only valid in conjunction withhealth_check_path.
- HealthCheck stringPath 
- The path to be checked for this function app health.
- Http2Enabled bool
- Specifies if the HTTP2 protocol should be enabled. Defaults to false.
- IpRestriction stringDefault Action 
- The Default action for traffic that does not match any ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- IpRestrictions []LinuxFunction App Slot Site Config Ip Restriction 
- an ip_restrictionblock as detailed below.
- LinuxFx stringVersion 
- The Linux FX Version
- LoadBalancing stringMode 
- The Site load balancing mode. Possible values include: WeightedRoundRobin,LeastRequests,LeastResponseTime,WeightedTotalTraffic,RequestHash,PerSiteRoundRobin. Defaults toLeastRequestsif omitted.
- ManagedPipeline stringMode 
- The Managed Pipeline mode. Possible values include: Integrated,Classic. Defaults toIntegrated.
- MinimumTls stringVersion 
- The configures the minimum version of TLS required for SSL requests. Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- PreWarmed intInstance Count 
- The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
- RemoteDebugging boolEnabled 
- Should Remote Debugging be enabled. Defaults to false.
- RemoteDebugging stringVersion 
- The Remote Debugging Version. Currently only VS2022is supported.
- RuntimeScale boolMonitoring Enabled 
- Should Functions Runtime Scale Monitoring be enabled. - NOTE: Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1. 
- ScmIp stringRestriction Default Action 
- The Default action for traffic that does not match any scm_ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- ScmIp []LinuxRestrictions Function App Slot Site Config Scm Ip Restriction 
- a scm_ip_restrictionblock as detailed below.
- ScmMinimum stringTls Version 
- Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- ScmType string
- The SCM Type in use by the Linux Function App.
- ScmUse boolMain Ip Restriction 
- Should the Linux Function App ip_restrictionconfiguration be used for the SCM also.
- Use32BitWorker bool
- Should the Linux Web App use a 32-bit worker.
- VnetRoute boolAll Enabled 
- Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to false.
- WebsocketsEnabled bool
- Should Web Sockets be enabled. Defaults to false.
- WorkerCount int
- The number of Workers for this Linux Function App.
- alwaysOn Boolean
- If this Linux Web App is Always On enabled. Defaults to false.
- apiDefinition StringUrl 
- The URL of the API definition that describes this Linux Function App.
- apiManagement StringApi Id 
- The ID of the API Management API for this Linux Function App.
- appCommand StringLine 
- The program and any arguments used to launch this app via the command line. (Example node myapp.js).
- appScale IntegerLimit 
- The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
- appService LinuxLogs Function App Slot Site Config App Service Logs 
- an app_service_logsblock as detailed below.
- applicationInsights StringConnection String 
- The Connection String for linking the Linux Function App to Application Insights.
- applicationInsights StringKey 
- The Instrumentation Key for connecting the Linux Function App to Application Insights.
- applicationStack LinuxFunction App Slot Site Config Application Stack 
- an application_stackblock as detailed below.
- autoSwap StringSlot Name 
- The name of the slot to automatically swap with when this slot is successfully deployed.
- containerRegistry StringManaged Identity Client Id 
- The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
- containerRegistry BooleanUse Managed Identity 
- Should connections for Azure Container Registry use Managed Identity.
- cors
LinuxFunction App Slot Site Config Cors 
- a corsblock as detailed below.
- defaultDocuments List<String>
- Specifies a list of Default Documents for the Linux Web App.
- detailedError BooleanLogging Enabled 
- Is detailed error logging enabled
- elasticInstance IntegerMinimum 
- The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
- ftpsState String
- State of FTP / FTPS service for this function app. Possible values include: AllAllowed,FtpsOnlyandDisabled. Defaults toDisabled.
- healthCheck IntegerEviction Time In Min 
- The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between 2and10. Defaults to0. Only valid in conjunction withhealth_check_path.
- healthCheck StringPath 
- The path to be checked for this function app health.
- http2Enabled Boolean
- Specifies if the HTTP2 protocol should be enabled. Defaults to false.
- ipRestriction StringDefault Action 
- The Default action for traffic that does not match any ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- ipRestrictions List<LinuxFunction App Slot Site Config Ip Restriction> 
- an ip_restrictionblock as detailed below.
- linuxFx StringVersion 
- The Linux FX Version
- loadBalancing StringMode 
- The Site load balancing mode. Possible values include: WeightedRoundRobin,LeastRequests,LeastResponseTime,WeightedTotalTraffic,RequestHash,PerSiteRoundRobin. Defaults toLeastRequestsif omitted.
- managedPipeline StringMode 
- The Managed Pipeline mode. Possible values include: Integrated,Classic. Defaults toIntegrated.
- minimumTls StringVersion 
- The configures the minimum version of TLS required for SSL requests. Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- preWarmed IntegerInstance Count 
- The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
- remoteDebugging BooleanEnabled 
- Should Remote Debugging be enabled. Defaults to false.
- remoteDebugging StringVersion 
- The Remote Debugging Version. Currently only VS2022is supported.
- runtimeScale BooleanMonitoring Enabled 
- Should Functions Runtime Scale Monitoring be enabled. - NOTE: Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1. 
- scmIp StringRestriction Default Action 
- The Default action for traffic that does not match any scm_ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- scmIp List<LinuxRestrictions Function App Slot Site Config Scm Ip Restriction> 
- a scm_ip_restrictionblock as detailed below.
- scmMinimum StringTls Version 
- Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- scmType String
- The SCM Type in use by the Linux Function App.
- scmUse BooleanMain Ip Restriction 
- Should the Linux Function App ip_restrictionconfiguration be used for the SCM also.
- use32BitWorker Boolean
- Should the Linux Web App use a 32-bit worker.
- vnetRoute BooleanAll Enabled 
- Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to false.
- websocketsEnabled Boolean
- Should Web Sockets be enabled. Defaults to false.
- workerCount Integer
- The number of Workers for this Linux Function App.
- alwaysOn boolean
- If this Linux Web App is Always On enabled. Defaults to false.
- apiDefinition stringUrl 
- The URL of the API definition that describes this Linux Function App.
- apiManagement stringApi Id 
- The ID of the API Management API for this Linux Function App.
- appCommand stringLine 
- The program and any arguments used to launch this app via the command line. (Example node myapp.js).
- appScale numberLimit 
- The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
- appService LinuxLogs Function App Slot Site Config App Service Logs 
- an app_service_logsblock as detailed below.
- applicationInsights stringConnection String 
- The Connection String for linking the Linux Function App to Application Insights.
- applicationInsights stringKey 
- The Instrumentation Key for connecting the Linux Function App to Application Insights.
- applicationStack LinuxFunction App Slot Site Config Application Stack 
- an application_stackblock as detailed below.
- autoSwap stringSlot Name 
- The name of the slot to automatically swap with when this slot is successfully deployed.
- containerRegistry stringManaged Identity Client Id 
- The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
- containerRegistry booleanUse Managed Identity 
- Should connections for Azure Container Registry use Managed Identity.
- cors
LinuxFunction App Slot Site Config Cors 
- a corsblock as detailed below.
- defaultDocuments string[]
- Specifies a list of Default Documents for the Linux Web App.
- detailedError booleanLogging Enabled 
- Is detailed error logging enabled
- elasticInstance numberMinimum 
- The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
- ftpsState string
- State of FTP / FTPS service for this function app. Possible values include: AllAllowed,FtpsOnlyandDisabled. Defaults toDisabled.
- healthCheck numberEviction Time In Min 
- The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between 2and10. Defaults to0. Only valid in conjunction withhealth_check_path.
- healthCheck stringPath 
- The path to be checked for this function app health.
- http2Enabled boolean
- Specifies if the HTTP2 protocol should be enabled. Defaults to false.
- ipRestriction stringDefault Action 
- The Default action for traffic that does not match any ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- ipRestrictions LinuxFunction App Slot Site Config Ip Restriction[] 
- an ip_restrictionblock as detailed below.
- linuxFx stringVersion 
- The Linux FX Version
- loadBalancing stringMode 
- The Site load balancing mode. Possible values include: WeightedRoundRobin,LeastRequests,LeastResponseTime,WeightedTotalTraffic,RequestHash,PerSiteRoundRobin. Defaults toLeastRequestsif omitted.
- managedPipeline stringMode 
- The Managed Pipeline mode. Possible values include: Integrated,Classic. Defaults toIntegrated.
- minimumTls stringVersion 
- The configures the minimum version of TLS required for SSL requests. Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- preWarmed numberInstance Count 
- The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
- remoteDebugging booleanEnabled 
- Should Remote Debugging be enabled. Defaults to false.
- remoteDebugging stringVersion 
- The Remote Debugging Version. Currently only VS2022is supported.
- runtimeScale booleanMonitoring Enabled 
- Should Functions Runtime Scale Monitoring be enabled. - NOTE: Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1. 
- scmIp stringRestriction Default Action 
- The Default action for traffic that does not match any scm_ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- scmIp LinuxRestrictions Function App Slot Site Config Scm Ip Restriction[] 
- a scm_ip_restrictionblock as detailed below.
- scmMinimum stringTls Version 
- Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- scmType string
- The SCM Type in use by the Linux Function App.
- scmUse booleanMain Ip Restriction 
- Should the Linux Function App ip_restrictionconfiguration be used for the SCM also.
- use32BitWorker boolean
- Should the Linux Web App use a 32-bit worker.
- vnetRoute booleanAll Enabled 
- Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to false.
- websocketsEnabled boolean
- Should Web Sockets be enabled. Defaults to false.
- workerCount number
- The number of Workers for this Linux Function App.
- always_on bool
- If this Linux Web App is Always On enabled. Defaults to false.
- api_definition_ strurl 
- The URL of the API definition that describes this Linux Function App.
- api_management_ strapi_ id 
- The ID of the API Management API for this Linux Function App.
- app_command_ strline 
- The program and any arguments used to launch this app via the command line. (Example node myapp.js).
- app_scale_ intlimit 
- The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
- app_service_ Linuxlogs Function App Slot Site Config App Service Logs 
- an app_service_logsblock as detailed below.
- application_insights_ strconnection_ string 
- The Connection String for linking the Linux Function App to Application Insights.
- application_insights_ strkey 
- The Instrumentation Key for connecting the Linux Function App to Application Insights.
- application_stack LinuxFunction App Slot Site Config Application Stack 
- an application_stackblock as detailed below.
- auto_swap_ strslot_ name 
- The name of the slot to automatically swap with when this slot is successfully deployed.
- container_registry_ strmanaged_ identity_ client_ id 
- The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
- container_registry_ booluse_ managed_ identity 
- Should connections for Azure Container Registry use Managed Identity.
- cors
LinuxFunction App Slot Site Config Cors 
- a corsblock as detailed below.
- default_documents Sequence[str]
- Specifies a list of Default Documents for the Linux Web App.
- detailed_error_ boollogging_ enabled 
- Is detailed error logging enabled
- elastic_instance_ intminimum 
- The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
- ftps_state str
- State of FTP / FTPS service for this function app. Possible values include: AllAllowed,FtpsOnlyandDisabled. Defaults toDisabled.
- health_check_ inteviction_ time_ in_ min 
- The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between 2and10. Defaults to0. Only valid in conjunction withhealth_check_path.
- health_check_ strpath 
- The path to be checked for this function app health.
- http2_enabled bool
- Specifies if the HTTP2 protocol should be enabled. Defaults to false.
- ip_restriction_ strdefault_ action 
- The Default action for traffic that does not match any ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- ip_restrictions Sequence[LinuxFunction App Slot Site Config Ip Restriction] 
- an ip_restrictionblock as detailed below.
- linux_fx_ strversion 
- The Linux FX Version
- load_balancing_ strmode 
- The Site load balancing mode. Possible values include: WeightedRoundRobin,LeastRequests,LeastResponseTime,WeightedTotalTraffic,RequestHash,PerSiteRoundRobin. Defaults toLeastRequestsif omitted.
- managed_pipeline_ strmode 
- The Managed Pipeline mode. Possible values include: Integrated,Classic. Defaults toIntegrated.
- minimum_tls_ strversion 
- The configures the minimum version of TLS required for SSL requests. Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- pre_warmed_ intinstance_ count 
- The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
- remote_debugging_ boolenabled 
- Should Remote Debugging be enabled. Defaults to false.
- remote_debugging_ strversion 
- The Remote Debugging Version. Currently only VS2022is supported.
- runtime_scale_ boolmonitoring_ enabled 
- Should Functions Runtime Scale Monitoring be enabled. - NOTE: Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1. 
- scm_ip_ strrestriction_ default_ action 
- The Default action for traffic that does not match any scm_ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- scm_ip_ Sequence[Linuxrestrictions Function App Slot Site Config Scm Ip Restriction] 
- a scm_ip_restrictionblock as detailed below.
- scm_minimum_ strtls_ version 
- Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- scm_type str
- The SCM Type in use by the Linux Function App.
- scm_use_ boolmain_ ip_ restriction 
- Should the Linux Function App ip_restrictionconfiguration be used for the SCM also.
- use32_bit_ boolworker 
- Should the Linux Web App use a 32-bit worker.
- vnet_route_ boolall_ enabled 
- Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to false.
- websockets_enabled bool
- Should Web Sockets be enabled. Defaults to false.
- worker_count int
- The number of Workers for this Linux Function App.
- alwaysOn Boolean
- If this Linux Web App is Always On enabled. Defaults to false.
- apiDefinition StringUrl 
- The URL of the API definition that describes this Linux Function App.
- apiManagement StringApi Id 
- The ID of the API Management API for this Linux Function App.
- appCommand StringLine 
- The program and any arguments used to launch this app via the command line. (Example node myapp.js).
- appScale NumberLimit 
- The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
- appService Property MapLogs 
- an app_service_logsblock as detailed below.
- applicationInsights StringConnection String 
- The Connection String for linking the Linux Function App to Application Insights.
- applicationInsights StringKey 
- The Instrumentation Key for connecting the Linux Function App to Application Insights.
- applicationStack Property Map
- an application_stackblock as detailed below.
- autoSwap StringSlot Name 
- The name of the slot to automatically swap with when this slot is successfully deployed.
- containerRegistry StringManaged Identity Client Id 
- The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
- containerRegistry BooleanUse Managed Identity 
- Should connections for Azure Container Registry use Managed Identity.
- cors Property Map
- a corsblock as detailed below.
- defaultDocuments List<String>
- Specifies a list of Default Documents for the Linux Web App.
- detailedError BooleanLogging Enabled 
- Is detailed error logging enabled
- elasticInstance NumberMinimum 
- The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
- ftpsState String
- State of FTP / FTPS service for this function app. Possible values include: AllAllowed,FtpsOnlyandDisabled. Defaults toDisabled.
- healthCheck NumberEviction Time In Min 
- The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between 2and10. Defaults to0. Only valid in conjunction withhealth_check_path.
- healthCheck StringPath 
- The path to be checked for this function app health.
- http2Enabled Boolean
- Specifies if the HTTP2 protocol should be enabled. Defaults to false.
- ipRestriction StringDefault Action 
- The Default action for traffic that does not match any ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- ipRestrictions List<Property Map>
- an ip_restrictionblock as detailed below.
- linuxFx StringVersion 
- The Linux FX Version
- loadBalancing StringMode 
- The Site load balancing mode. Possible values include: WeightedRoundRobin,LeastRequests,LeastResponseTime,WeightedTotalTraffic,RequestHash,PerSiteRoundRobin. Defaults toLeastRequestsif omitted.
- managedPipeline StringMode 
- The Managed Pipeline mode. Possible values include: Integrated,Classic. Defaults toIntegrated.
- minimumTls StringVersion 
- The configures the minimum version of TLS required for SSL requests. Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- preWarmed NumberInstance Count 
- The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
- remoteDebugging BooleanEnabled 
- Should Remote Debugging be enabled. Defaults to false.
- remoteDebugging StringVersion 
- The Remote Debugging Version. Currently only VS2022is supported.
- runtimeScale BooleanMonitoring Enabled 
- Should Functions Runtime Scale Monitoring be enabled. - NOTE: Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1. 
- scmIp StringRestriction Default Action 
- The Default action for traffic that does not match any scm_ip_restrictionrule. possible values includeAllowandDeny. Defaults toAllow.
- scmIp List<Property Map>Restrictions 
- a scm_ip_restrictionblock as detailed below.
- scmMinimum StringTls Version 
- Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: 1.0,1.1,1.2and1.3. Defaults to1.2.
- scmType String
- The SCM Type in use by the Linux Function App.
- scmUse BooleanMain Ip Restriction 
- Should the Linux Function App ip_restrictionconfiguration be used for the SCM also.
- use32BitWorker Boolean
- Should the Linux Web App use a 32-bit worker.
- vnetRoute BooleanAll Enabled 
- Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to false.
- websocketsEnabled Boolean
- Should Web Sockets be enabled. Defaults to false.
- workerCount Number
- The number of Workers for this Linux Function App.
LinuxFunctionAppSlotSiteConfigAppServiceLogs, LinuxFunctionAppSlotSiteConfigAppServiceLogsArgs                  
- DiskQuota intMb 
- The amount of disk space to use for logs. Valid values are between 25and100. Defaults to35.
- RetentionPeriod intDays 
- The retention period for logs in days. Valid values are between - 0and- 99999.(never delete).- NOTE: This block is not supported on Consumption plans. 
- DiskQuota intMb 
- The amount of disk space to use for logs. Valid values are between 25and100. Defaults to35.
- RetentionPeriod intDays 
- The retention period for logs in days. Valid values are between - 0and- 99999.(never delete).- NOTE: This block is not supported on Consumption plans. 
- diskQuota IntegerMb 
- The amount of disk space to use for logs. Valid values are between 25and100. Defaults to35.
- retentionPeriod IntegerDays 
- The retention period for logs in days. Valid values are between - 0and- 99999.(never delete).- NOTE: This block is not supported on Consumption plans. 
- diskQuota numberMb 
- The amount of disk space to use for logs. Valid values are between 25and100. Defaults to35.
- retentionPeriod numberDays 
- The retention period for logs in days. Valid values are between - 0and- 99999.(never delete).- NOTE: This block is not supported on Consumption plans. 
- disk_quota_ intmb 
- The amount of disk space to use for logs. Valid values are between 25and100. Defaults to35.
- retention_period_ intdays 
- The retention period for logs in days. Valid values are between - 0and- 99999.(never delete).- NOTE: This block is not supported on Consumption plans. 
- diskQuota NumberMb 
- The amount of disk space to use for logs. Valid values are between 25and100. Defaults to35.
- retentionPeriod NumberDays 
- The retention period for logs in days. Valid values are between - 0and- 99999.(never delete).- NOTE: This block is not supported on Consumption plans. 
LinuxFunctionAppSlotSiteConfigApplicationStack, LinuxFunctionAppSlotSiteConfigApplicationStackArgs                
- Dockers
List<LinuxFunction App Slot Site Config Application Stack Docker> 
- a dockerblock as detailed below.
- DotnetVersion string
- The version of .Net. Possible values are 3.1,6.0,7.0,8.0and9.0.
- JavaVersion string
- The version of Java to use. Possible values are 8,11&17(In-Preview).
- NodeVersion string
- The version of Node to use. Possible values include 12,14,16,18and20
- PowershellCore stringVersion 
- The version of PowerShell Core to use. Possibles values are 7,7.2, and7.4.
- PythonVersion string
- The version of Python to use. Possible values are 3.12,3.11,3.10,3.9,3.8and3.7.
- UseCustom boolRuntime 
- Should the Linux Function App use a custom runtime?
- UseDotnet boolIsolated Runtime 
- Should the DotNet process use an isolated runtime. Defaults to false.
- Dockers
[]LinuxFunction App Slot Site Config Application Stack Docker 
- a dockerblock as detailed below.
- DotnetVersion string
- The version of .Net. Possible values are 3.1,6.0,7.0,8.0and9.0.
- JavaVersion string
- The version of Java to use. Possible values are 8,11&17(In-Preview).
- NodeVersion string
- The version of Node to use. Possible values include 12,14,16,18and20
- PowershellCore stringVersion 
- The version of PowerShell Core to use. Possibles values are 7,7.2, and7.4.
- PythonVersion string
- The version of Python to use. Possible values are 3.12,3.11,3.10,3.9,3.8and3.7.
- UseCustom boolRuntime 
- Should the Linux Function App use a custom runtime?
- UseDotnet boolIsolated Runtime 
- Should the DotNet process use an isolated runtime. Defaults to false.
- dockers
List<LinuxFunction App Slot Site Config Application Stack Docker> 
- a dockerblock as detailed below.
- dotnetVersion String
- The version of .Net. Possible values are 3.1,6.0,7.0,8.0and9.0.
- javaVersion String
- The version of Java to use. Possible values are 8,11&17(In-Preview).
- nodeVersion String
- The version of Node to use. Possible values include 12,14,16,18and20
- powershellCore StringVersion 
- The version of PowerShell Core to use. Possibles values are 7,7.2, and7.4.
- pythonVersion String
- The version of Python to use. Possible values are 3.12,3.11,3.10,3.9,3.8and3.7.
- useCustom BooleanRuntime 
- Should the Linux Function App use a custom runtime?
- useDotnet BooleanIsolated Runtime 
- Should the DotNet process use an isolated runtime. Defaults to false.
- dockers
LinuxFunction App Slot Site Config Application Stack Docker[] 
- a dockerblock as detailed below.
- dotnetVersion string
- The version of .Net. Possible values are 3.1,6.0,7.0,8.0and9.0.
- javaVersion string
- The version of Java to use. Possible values are 8,11&17(In-Preview).
- nodeVersion string
- The version of Node to use. Possible values include 12,14,16,18and20
- powershellCore stringVersion 
- The version of PowerShell Core to use. Possibles values are 7,7.2, and7.4.
- pythonVersion string
- The version of Python to use. Possible values are 3.12,3.11,3.10,3.9,3.8and3.7.
- useCustom booleanRuntime 
- Should the Linux Function App use a custom runtime?
- useDotnet booleanIsolated Runtime 
- Should the DotNet process use an isolated runtime. Defaults to false.
- dockers
Sequence[LinuxFunction App Slot Site Config Application Stack Docker] 
- a dockerblock as detailed below.
- dotnet_version str
- The version of .Net. Possible values are 3.1,6.0,7.0,8.0and9.0.
- java_version str
- The version of Java to use. Possible values are 8,11&17(In-Preview).
- node_version str
- The version of Node to use. Possible values include 12,14,16,18and20
- powershell_core_ strversion 
- The version of PowerShell Core to use. Possibles values are 7,7.2, and7.4.
- python_version str
- The version of Python to use. Possible values are 3.12,3.11,3.10,3.9,3.8and3.7.
- use_custom_ boolruntime 
- Should the Linux Function App use a custom runtime?
- use_dotnet_ boolisolated_ runtime 
- Should the DotNet process use an isolated runtime. Defaults to false.
- dockers List<Property Map>
- a dockerblock as detailed below.
- dotnetVersion String
- The version of .Net. Possible values are 3.1,6.0,7.0,8.0and9.0.
- javaVersion String
- The version of Java to use. Possible values are 8,11&17(In-Preview).
- nodeVersion String
- The version of Node to use. Possible values include 12,14,16,18and20
- powershellCore StringVersion 
- The version of PowerShell Core to use. Possibles values are 7,7.2, and7.4.
- pythonVersion String
- The version of Python to use. Possible values are 3.12,3.11,3.10,3.9,3.8and3.7.
- useCustom BooleanRuntime 
- Should the Linux Function App use a custom runtime?
- useDotnet BooleanIsolated Runtime 
- Should the DotNet process use an isolated runtime. Defaults to false.
LinuxFunctionAppSlotSiteConfigApplicationStackDocker, LinuxFunctionAppSlotSiteConfigApplicationStackDockerArgs                  
- ImageName string
- The name of the Docker image to use.
- ImageTag string
- The image tag of the image to use.
- RegistryUrl string
- The URL of the docker registry.
- RegistryPassword string
- The password for the account to use to connect to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- RegistryUsername string
- The username to use for connections to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- ImageName string
- The name of the Docker image to use.
- ImageTag string
- The image tag of the image to use.
- RegistryUrl string
- The URL of the docker registry.
- RegistryPassword string
- The password for the account to use to connect to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- RegistryUsername string
- The username to use for connections to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- imageName String
- The name of the Docker image to use.
- imageTag String
- The image tag of the image to use.
- registryUrl String
- The URL of the docker registry.
- registryPassword String
- The password for the account to use to connect to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- registryUsername String
- The username to use for connections to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- imageName string
- The name of the Docker image to use.
- imageTag string
- The image tag of the image to use.
- registryUrl string
- The URL of the docker registry.
- registryPassword string
- The password for the account to use to connect to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- registryUsername string
- The username to use for connections to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- image_name str
- The name of the Docker image to use.
- image_tag str
- The image tag of the image to use.
- registry_url str
- The URL of the docker registry.
- registry_password str
- The password for the account to use to connect to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- registry_username str
- The username to use for connections to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- imageName String
- The name of the Docker image to use.
- imageTag String
- The image tag of the image to use.
- registryUrl String
- The URL of the docker registry.
- registryPassword String
- The password for the account to use to connect to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
- registryUsername String
- The username to use for connections to the registry. - NOTE: This value is required if - container_registry_use_managed_identityis not set to- true.
LinuxFunctionAppSlotSiteConfigCors, LinuxFunctionAppSlotSiteConfigCorsArgs              
- AllowedOrigins List<string>
- Specifies a list of origins that should be allowed to make cross-origin calls.
- SupportCredentials bool
- Are credentials allowed in CORS requests? Defaults to false.
- AllowedOrigins []string
- Specifies a list of origins that should be allowed to make cross-origin calls.
- SupportCredentials bool
- Are credentials allowed in CORS requests? Defaults to false.
- allowedOrigins List<String>
- Specifies a list of origins that should be allowed to make cross-origin calls.
- supportCredentials Boolean
- Are credentials allowed in CORS requests? Defaults to false.
- allowedOrigins string[]
- Specifies a list of origins that should be allowed to make cross-origin calls.
- supportCredentials boolean
- Are credentials allowed in CORS requests? Defaults to false.
- allowed_origins Sequence[str]
- Specifies a list of origins that should be allowed to make cross-origin calls.
- support_credentials bool
- Are credentials allowed in CORS requests? Defaults to false.
- allowedOrigins List<String>
- Specifies a list of origins that should be allowed to make cross-origin calls.
- supportCredentials Boolean
- Are credentials allowed in CORS requests? Defaults to false.
LinuxFunctionAppSlotSiteConfigIpRestriction, LinuxFunctionAppSlotSiteConfigIpRestrictionArgs                
- Action string
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- Description string
- The Description of this IP Restriction.
- Headers
LinuxFunction App Slot Site Config Ip Restriction Headers 
- a headersblock as detailed below.
- IpAddress string
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- Name string
- The name which should be used for this ip_restriction.
- Priority int
- The priority value of this ip_restriction. Defaults to65000.
- ServiceTag string
- The Service Tag used for this IP Restriction.
- VirtualNetwork stringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction. - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- Action string
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- Description string
- The Description of this IP Restriction.
- Headers
LinuxFunction App Slot Site Config Ip Restriction Headers 
- a headersblock as detailed below.
- IpAddress string
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- Name string
- The name which should be used for this ip_restriction.
- Priority int
- The priority value of this ip_restriction. Defaults to65000.
- ServiceTag string
- The Service Tag used for this IP Restriction.
- VirtualNetwork stringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction. - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action String
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description String
- The Description of this IP Restriction.
- headers
LinuxFunction App Slot Site Config Ip Restriction Headers 
- a headersblock as detailed below.
- ipAddress String
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name String
- The name which should be used for this ip_restriction.
- priority Integer
- The priority value of this ip_restriction. Defaults to65000.
- serviceTag String
- The Service Tag used for this IP Restriction.
- virtualNetwork StringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction. - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action string
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description string
- The Description of this IP Restriction.
- headers
LinuxFunction App Slot Site Config Ip Restriction Headers 
- a headersblock as detailed below.
- ipAddress string
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name string
- The name which should be used for this ip_restriction.
- priority number
- The priority value of this ip_restriction. Defaults to65000.
- serviceTag string
- The Service Tag used for this IP Restriction.
- virtualNetwork stringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction. - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action str
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description str
- The Description of this IP Restriction.
- headers
LinuxFunction App Slot Site Config Ip Restriction Headers 
- a headersblock as detailed below.
- ip_address str
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name str
- The name which should be used for this ip_restriction.
- priority int
- The priority value of this ip_restriction. Defaults to65000.
- service_tag str
- The Service Tag used for this IP Restriction.
- virtual_network_ strsubnet_ id 
- The Virtual Network Subnet ID used for this IP Restriction. - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action String
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description String
- The Description of this IP Restriction.
- headers Property Map
- a headersblock as detailed below.
- ipAddress String
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name String
- The name which should be used for this ip_restriction.
- priority Number
- The priority value of this ip_restriction. Defaults to65000.
- serviceTag String
- The Service Tag used for this IP Restriction.
- virtualNetwork StringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction. - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
LinuxFunctionAppSlotSiteConfigIpRestrictionHeaders, LinuxFunctionAppSlotSiteConfigIpRestrictionHeadersArgs                  
- XAzureFdids List<string>
- Specifies a list of Azure Front Door IDs.
- XFdHealth stringProbe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- XForwardedFors List<string>
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- XForwardedHosts List<string>
- Specifies a list of Hosts for which matching should be applied.
- XAzureFdids []string
- Specifies a list of Azure Front Door IDs.
- XFdHealth stringProbe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- XForwardedFors []string
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- XForwardedHosts []string
- Specifies a list of Hosts for which matching should be applied.
- xAzure List<String>Fdids 
- Specifies a list of Azure Front Door IDs.
- xFd StringHealth Probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- xForwarded List<String>Fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- xForwarded List<String>Hosts 
- Specifies a list of Hosts for which matching should be applied.
- xAzure string[]Fdids 
- Specifies a list of Azure Front Door IDs.
- xFd stringHealth Probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- xForwarded string[]Fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- xForwarded string[]Hosts 
- Specifies a list of Hosts for which matching should be applied.
- x_azure_ Sequence[str]fdids 
- Specifies a list of Azure Front Door IDs.
- x_fd_ strhealth_ probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- x_forwarded_ Sequence[str]fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- x_forwarded_ Sequence[str]hosts 
- Specifies a list of Hosts for which matching should be applied.
- xAzure List<String>Fdids 
- Specifies a list of Azure Front Door IDs.
- xFd StringHealth Probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- xForwarded List<String>Fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- xForwarded List<String>Hosts 
- Specifies a list of Hosts for which matching should be applied.
LinuxFunctionAppSlotSiteConfigScmIpRestriction, LinuxFunctionAppSlotSiteConfigScmIpRestrictionArgs                  
- Action string
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- Description string
- The Description of this IP Restriction.
- Headers
LinuxFunction App Slot Site Config Scm Ip Restriction Headers 
- a headersblock as detailed below.
- IpAddress string
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- Name string
- The name which should be used for this ip_restriction.
- Priority int
- The priority value of this ip_restriction. Defaults to65000.
- ServiceTag string
- The Service Tag used for this IP Restriction.
- VirtualNetwork stringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction.ENDEXPERIMENT - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- Action string
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- Description string
- The Description of this IP Restriction.
- Headers
LinuxFunction App Slot Site Config Scm Ip Restriction Headers 
- a headersblock as detailed below.
- IpAddress string
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- Name string
- The name which should be used for this ip_restriction.
- Priority int
- The priority value of this ip_restriction. Defaults to65000.
- ServiceTag string
- The Service Tag used for this IP Restriction.
- VirtualNetwork stringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction.ENDEXPERIMENT - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action String
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description String
- The Description of this IP Restriction.
- headers
LinuxFunction App Slot Site Config Scm Ip Restriction Headers 
- a headersblock as detailed below.
- ipAddress String
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name String
- The name which should be used for this ip_restriction.
- priority Integer
- The priority value of this ip_restriction. Defaults to65000.
- serviceTag String
- The Service Tag used for this IP Restriction.
- virtualNetwork StringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction.ENDEXPERIMENT - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action string
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description string
- The Description of this IP Restriction.
- headers
LinuxFunction App Slot Site Config Scm Ip Restriction Headers 
- a headersblock as detailed below.
- ipAddress string
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name string
- The name which should be used for this ip_restriction.
- priority number
- The priority value of this ip_restriction. Defaults to65000.
- serviceTag string
- The Service Tag used for this IP Restriction.
- virtualNetwork stringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction.ENDEXPERIMENT - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action str
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description str
- The Description of this IP Restriction.
- headers
LinuxFunction App Slot Site Config Scm Ip Restriction Headers 
- a headersblock as detailed below.
- ip_address str
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name str
- The name which should be used for this ip_restriction.
- priority int
- The priority value of this ip_restriction. Defaults to65000.
- service_tag str
- The Service Tag used for this IP Restriction.
- virtual_network_ strsubnet_ id 
- The Virtual Network Subnet ID used for this IP Restriction.ENDEXPERIMENT - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
- action String
- The action to take. Possible values are AlloworDeny. Defaults toAllow.
- description String
- The Description of this IP Restriction.
- headers Property Map
- a headersblock as detailed below.
- ipAddress String
- The CIDR notation of the IP or IP Range to match. For example: 10.0.0.0/24or192.168.10.1/32
- name String
- The name which should be used for this ip_restriction.
- priority Number
- The priority value of this ip_restriction. Defaults to65000.
- serviceTag String
- The Service Tag used for this IP Restriction.
- virtualNetwork StringSubnet Id 
- The Virtual Network Subnet ID used for this IP Restriction.ENDEXPERIMENT - NOTE: One and only one of - ip_address,- service_tagor- virtual_network_subnet_idmust be specified.
LinuxFunctionAppSlotSiteConfigScmIpRestrictionHeaders, LinuxFunctionAppSlotSiteConfigScmIpRestrictionHeadersArgs                    
- XAzureFdids List<string>
- Specifies a list of Azure Front Door IDs.
- XFdHealth stringProbe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- XForwardedFors List<string>
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- XForwardedHosts List<string>
- Specifies a list of Hosts for which matching should be applied.
- XAzureFdids []string
- Specifies a list of Azure Front Door IDs.
- XFdHealth stringProbe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- XForwardedFors []string
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- XForwardedHosts []string
- Specifies a list of Hosts for which matching should be applied.
- xAzure List<String>Fdids 
- Specifies a list of Azure Front Door IDs.
- xFd StringHealth Probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- xForwarded List<String>Fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- xForwarded List<String>Hosts 
- Specifies a list of Hosts for which matching should be applied.
- xAzure string[]Fdids 
- Specifies a list of Azure Front Door IDs.
- xFd stringHealth Probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- xForwarded string[]Fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- xForwarded string[]Hosts 
- Specifies a list of Hosts for which matching should be applied.
- x_azure_ Sequence[str]fdids 
- Specifies a list of Azure Front Door IDs.
- x_fd_ strhealth_ probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- x_forwarded_ Sequence[str]fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- x_forwarded_ Sequence[str]hosts 
- Specifies a list of Hosts for which matching should be applied.
- xAzure List<String>Fdids 
- Specifies a list of Azure Front Door IDs.
- xFd StringHealth Probe 
- Specifies if a Front Door Health Probe should be expected. The only possible value is 1.
- xForwarded List<String>Fors 
- Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
- xForwarded List<String>Hosts 
- Specifies a list of Hosts for which matching should be applied.
LinuxFunctionAppSlotSiteCredential, LinuxFunctionAppSlotSiteCredentialArgs            
LinuxFunctionAppSlotStorageAccount, LinuxFunctionAppSlotStorageAccountArgs            
- AccessKey string
- The Access key for the storage account.
- AccountName string
- The Name of the Storage Account.
- Name string
- The name which should be used for this Storage Account.
- string
- The Name of the File Share or Container Name for Blob storage.
- Type string
- The Azure Storage Type. Possible values include AzureFilesandAzureBlob.
- MountPath string
- The path at which to mount the storage share.
- AccessKey string
- The Access key for the storage account.
- AccountName string
- The Name of the Storage Account.
- Name string
- The name which should be used for this Storage Account.
- string
- The Name of the File Share or Container Name for Blob storage.
- Type string
- The Azure Storage Type. Possible values include AzureFilesandAzureBlob.
- MountPath string
- The path at which to mount the storage share.
- accessKey String
- The Access key for the storage account.
- accountName String
- The Name of the Storage Account.
- name String
- The name which should be used for this Storage Account.
- String
- The Name of the File Share or Container Name for Blob storage.
- type String
- The Azure Storage Type. Possible values include AzureFilesandAzureBlob.
- mountPath String
- The path at which to mount the storage share.
- accessKey string
- The Access key for the storage account.
- accountName string
- The Name of the Storage Account.
- name string
- The name which should be used for this Storage Account.
- string
- The Name of the File Share or Container Name for Blob storage.
- type string
- The Azure Storage Type. Possible values include AzureFilesandAzureBlob.
- mountPath string
- The path at which to mount the storage share.
- access_key str
- The Access key for the storage account.
- account_name str
- The Name of the Storage Account.
- name str
- The name which should be used for this Storage Account.
- str
- The Name of the File Share or Container Name for Blob storage.
- type str
- The Azure Storage Type. Possible values include AzureFilesandAzureBlob.
- mount_path str
- The path at which to mount the storage share.
- accessKey String
- The Access key for the storage account.
- accountName String
- The Name of the Storage Account.
- name String
- The name which should be used for this Storage Account.
- String
- The Name of the File Share or Container Name for Blob storage.
- type String
- The Azure Storage Type. Possible values include AzureFilesandAzureBlob.
- mountPath String
- The path at which to mount the storage share.
Import
A Linux Function App Slot can be imported using the resource id, e.g.
$ pulumi import azure:appservice/linuxFunctionAppSlot:LinuxFunctionAppSlot example "/subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/resGroup1/providers/Microsoft.Web/sites/site1/slots/slot1"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the azurermTerraform Provider.