Azure Functions App

azure-functions

Function app (Flex Consumption or Premium) with storage, Application Insights, managed identity and VNet integration. Works with Terraform and OpenTofu (>= 1.6), AzureRM provider >= 4.31, < 5.0.

Secure defaults:

• HTTPS-only, TLS 1.2 minimum, HTTP/2 on, FTPS disabled (premium path)
• System-assigned managed identity on the app — no service principals
• Backing storage: TLS 1.2, HTTPS-only, no public nested items, 7-day blob/container soft-delete
• Workspace-based Application Insights (classic AI is deprecated)
• Flex Consumption: private deployment container; optional identity-based access (module grants Storage Blob Data Contributor automatically)

Requirements

• Terraform or OpenTofu >= 1.6
• hashicorp/azurerm >= 4.31, < 5.0 (4.31.0 is the first release where the azurerm_function_app_flex_consumption resource supports everything this module configures, including https_only; older 4.x releases fail validate)

Notes for integrators:

• Flex Consumption is the strategic replacement for the classic Consumption (Y1) plan — this module deliberately offers flex + premium only.
• The derived storage account name is deterministic from name; storage names are globally unique, so pass storage_account_name if you hit a clash.
• VNet integration on Flex Consumption requires a subnet delegated to Microsoft.App/environments; for Premium, delegate to Microsoft.Web/serverFarms.

Verification

Static-validated (fmt, validate, tflint). Live apply/destroy testing pending cloud sandbox availability — see catalog status.

License

Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).