Explicitly set https required (#581)

tonybaloney · web-flow · commit f277771ed196 · 2023-09-07T05:44:25.000-07:00
diff --git a/infra/core/storage/storage-account.bicep b/infra/core/storage/storage-account.bicep
@@ -13,6 +13,7 @@ param deleteRetentionPolicy object = {}
 param dnsEndpointType string = 'Standard'
 param kind string = 'StorageV2'
 param minimumTlsVersion string = 'TLS1_2'
+param requireHttpsConnection bool = true
 @allowed([ 'Enabled', 'Disabled' ])
 param publicNetworkAccess string = 'Disabled'
 param sku object = { name: 'Standard_LRS' }
@@ -38,6 +39,7 @@ resource storage 'Microsoft.Storage/storageAccounts@2022-05-01' = {
       defaultAction: 'Allow'
     }
     publicNetworkAccess: publicNetworkAccess
+    supportsHttpsTrafficOnly: requireHttpsConnection
   }
 
   resource blobServices 'blobServices' = if (!empty(containers)) {

Original file line number	Diff line number	Diff line change
`@@ -13,6 +13,7 @@ param deleteRetentionPolicy object = {}`
`13`	`13`	`param dnsEndpointType string = 'Standard'`
`14`	`14`	`param kind string = 'StorageV2'`
`15`	`15`	`param minimumTlsVersion string = 'TLS1_2'`
	`16`	`+param requireHttpsConnection bool = true`
`16`	`17`	`@allowed([ 'Enabled', 'Disabled' ])`
`17`	`18`	`param publicNetworkAccess string = 'Disabled'`
`18`	`19`	`param sku object = { name: 'Standard_LRS' }`
`@@ -38,6 +39,7 @@ resource storage 'Microsoft.Storage/storageAccounts@2022-05-01' = {`
`38`	`39`	`defaultAction: 'Allow'`
`39`	`40`	`}`
`40`	`41`	`publicNetworkAccess: publicNetworkAccess`
	`42`	`+ supportsHttpsTrafficOnly: requireHttpsConnection`
`41`	`43`	`}`
`42`	`44`
`43`	`45`	`resource blobServices 'blobServices' = if (!empty(containers)) {`