/bicep-quickstart-frontdoor-private-endpoint-appservice

Template to quick deploy Azure Front Door premium with Private Endpoint to Azure App service

Primary LanguageBicepMIT LicenseMIT

quickstart-frontdoor-private-endpoint-appservice 🚪

Azure Bicep Template to deploy Azure Front Door premium with Private Endpoint to your Azure App service.

With a web log analytics workspace, app insights enabled, system-assigned managed identity enabled with vNet integration. PE to the web app direct from Front Door.

Blog post with more information

Azure Architecture ☁️

afd-pe-app-service-architecture-draw

Getting started 🎬

Pre-reqs

  • Two existing resource groups
  • Azure CLI installed
  • Authenticated to your tenant: az login

Deploy 🚀

Warning

This deploys many resources, including Azure Front Door Premium which can be costly if left running for the month (circa $300+). Do not leave running if you don't want to incur charges. Delete as soon as possible post deployment if you're just testing.

  1. Fork the repository
  2. Amend the main.bicep file parameters to suit your deployment naming, subscription guid for the app service location & existing resource group names
  3. Deploy (will deploy Front Door to here only and use the Bicep scopes for everything else):
az deployment group create --resource-group 'your-fd-rg-here'  -f .\main.bicep
  1. Approve your Private Endpoint connection in the Private Link Centre and wait 15~ minutes for Front Door to show the App service splash screen