Verification
Live-testedReally deployed to a cloud sandbox, verified against its outputs and assertions, then destroyed - with the teardown confirmed.
Conformance
- Static validation (fmt · validate · tflint)
- No applicable security policies for this provider
- Plan test superseded by live test
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live-tested - applied, verified, destroyed
Last verified 2026-06-30 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o azure-logic-app-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/azure-logic-app/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle azure-logic-app-1.0.0.sigstore.json \
azure-logic-app-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "5cc5d8575df560a7288d33dba0c038d7efbe63e733ddf2f6325f662ba1ce5ac5 azure-logic-app-1.0.0.tar.gz" | sha256sum -cUse it from the registry
terraform · opentofumodule "logic_app" {
source = "www.iac-bazaar.com/iac-bazaar/azure-logic-app/azure"
version = "1.0.0"
}Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.
Inputs & outputs
Create a free account to read this module's contract
The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.
A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.
Documentation
azure-logic-app
Azure Logic App (Consumption) workflow with a built-in Recurrence
trigger — a serverless, pay-per-execution automation you can extend with
connectors and actions. Secure by default: a system-assigned managed
identity so the workflow authenticates to other Azure resources with no stored
secrets, and inbound IP access-control allowlists exposed for request-style
triggers. The module consumes an existing resource group. Works with
Terraform and OpenTofu (>= 1.6), azurerm provider >= 4.0, < 5.0.
Security notes
- Managed identity, not secrets. The default
SystemAssignedidentity lets the workflow call other Azure services via Entra ID. Grant it least-privilege RBAC roles instead of embedding connection strings or keys in the definition. - Lock down request triggers. A Recurrence trigger has no public caller, but
if you later add an HTTP/request trigger, set
access_control.trigger_allowed_ip_ranges(and the content/management lists) to your known CIDRs so the workflow is not callable from arbitrary IPs. - Keep secrets out of state.
parameters/workflow_parametersare stored in plaintext in Terraform state. Use SecureString parameters sourced from Key Vault, or pass values viaTF_VAR_at runtime; never commit secret literals.
Requirements
| Requirement | Version |
|---|---|
| Terraform / OpenTofu | >= 1.6 |
hashicorp/azurerm | >= 4.0, < 5.0 |
The Microsoft.Logic resource provider must be registered on the subscription.
License
Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).
Usage code & full reference unlock after purchase
The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.
- Usage
- Inputs
- Outputs
Related modules
Azure App Service (Linux Web App)
App Service plan + Linux web app with deployment slots, custom domain + managed TLS, VNet integration and autoscale.
Azure Container Apps Environment
Container Apps environment with workload profiles, Dapr, KEDA scale rules, ACR pull identity and custom domain.
Azure Container Instances (ACI)
Runs one or more containers on Azure Container Instances without VMs or an orchestrator - secure by default with no privileged containers, redacted secret fields, and an optional managed identity.
Azure Functions App
Function app (Flex Consumption or Premium) with storage, Application Insights, managed identity and VNet integration.
Azure Static Web App
Globally distributed hosting for static sites and SPAs on Azure Static Web Apps with optional serverless APIs, free auto-renewing TLS, and a built-in global CDN - defaulting to the cost-free Free SKU.