Azure App Service (Linux Web App)
App Service plan + Linux web app with deployment slots, custom domain + managed TLS, VNet integration and autoscale.
Verification
Static-verifiedPassed: validated and lint-clean (provider-schema-validated for AWS/Azure/GCP; Terraform-language lint elsewhere).
Conformance
- Static validation (fmt · validate · tflint)
- Security scan: findings disclosed (Checkov)
- Plan tests (mocked: validation rules · outputs)
Provenance
- SHA-256 checksum
- Signature (pending)
Functional
- Live test pending (no cloud run yet)
Last verified 2026-06-28 · how we verify
Documentation
azure-app-service
App Service plan + Linux web app with deployment slots, custom domain + managed
TLS, VNet integration and autoscale. Works with Terraform and OpenTofu
(>= 1.6), azurerm provider >= 4.0, < 5.0.
Secure defaults:
- HTTPS-only, minimum TLS 1.2, FTPS disabled, HTTP/2 enabled
- System-assigned managed identity on the app and every slot
- Custom hostname → managed certificate → SNI binding wired in the exact three-resource order azurerm requires (the classic ordering trap)
- CPU-based plan autoscale with a precondition guarding non-capable SKUs
Requirements
- Terraform or OpenTofu
>= 1.6 hashicorp/azurerm>= 4.0, < 5.0(built against 4.76)- Custom domains: DNS CNAME (or A + TXT
asuid.<domain>) must already point at the app before apply, or hostname binding fails. - Slots and autoscale need a Standard or better SKU.
Verification
Static-validated (fmt, validate, tflint). Live apply/destroy testing pending cloud sandbox availability — see catalog status.
License
Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).
Usage code & full reference unlock after purchase
The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence — shown here and bundled in the download.
- Usage
- Inputs
- Outputs