azure-health-data-services-toolkit/samples/Quickstart/infra/azureFunction.bicep at bb2c7f4993973181b53164ee87e05eec9b1c4c60 · microsoft/azure-health-data-services-toolkit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
param storageAccountName string
param appServiceName string
param functionAppName string
param appInsightsConnectionString string
param location string
param functionSettings object = {}
param appTags object = {}

@description('Azure Function required linked storage account')
resource funcStorageAccount 'Microsoft.Storage/storageAccounts@2021-08-01' = {
    name: storageAccountName
    location: location
    kind: 'StorageV2'
    sku: {
        name: 'Standard_LRS'
    }
    properties: {
        allowSharedKeyAccess: false
    }
    tags: appTags
}

@description('App Service used to run Azure Function')
resource hostingPlan 'Microsoft.Web/serverfarms@2021-03-01' = {
  name: appServiceName
  location: location
  kind: 'functionapp,linux'
  sku: {
    name: 'S1'
    tier: 'Standard'
  }
  properties: {
    reserved: true
  }
  tags: appTags
}

@description('Azure Function used to run toolkit compute')
resource functionApp 'Microsoft.Web/sites@2021-03-01' = {
    name: functionAppName
    location: location
    kind: 'functionapp,linux'

    identity: {
        type: 'SystemAssigned'
    }

    properties: {
        httpsOnly: true
        enabled: true
        serverFarmId: hostingPlan.id
        reserved: true
        clientAffinityEnabled: false
        siteConfig: {
            //netFrameworkVersion: 'v8.0'
            linuxFxVersion: 'dotnet-isolated|8.0'
            use32BitWorkerProcess: false
            alwaysOn: true
        }
    }

    tags: union(appTags, {
            'azd-service-name': 'func'
        })

    resource ftpPublishingPolicy 'basicPublishingCredentialsPolicies' = {
        name: 'ftp'
        // Location is needed regardless of the warning.
        #disable-next-line BCP187
        location: location
        properties: {
            allow: false
        }
    }

    resource scmPublishingPolicy 'basicPublishingCredentialsPolicies' = {
        name: 'scm'
        // Location is needed regardless of the warning.
        #disable-next-line BCP187
        location: location
        properties: {
            allow: false
        }
    }
}

resource functionAppSettings 'Microsoft.Web/sites/config@2022-09-01' = {
    name: 'appsettings'
    parent: functionApp
    properties: union({
            AzureWebJobsStorage__accountname: storageAccountName
            FUNCTIONS_EXTENSION_VERSION: '~4'
            FUNCTIONS_WORKER_RUNTIME: 'dotnet-isolated'
            APPLICATIONINSIGHTS_CONNECTION_STRING: appInsightsConnectionString
            SCM_DO_BUILD_DURING_DEPLOYMENT: 'false'
            ENABLE_ORYX_BUILD: 'false'
        }, functionSettings)
}


resource roleAssignment1 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
    name: guid('roleStorageBlobDataOwner-${storageAccountName}')
    properties: {
      roleDefinitionId: resourceId('Microsoft.Authorization/roleDefinitions', 'b7e6dc6d-f1e8-4753-8033-0f276bb0955b')
      principalId: functionApp.identity.principalId
    }
}

resource roleAssignment2 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
    name: guid('roleStorageAccountContributor-${storageAccountName}')
    properties: {
      roleDefinitionId: resourceId('Microsoft.Authorization/roleDefinitions', '17d1049b-9a84-46fb-8f53-869881c3d3ab')
      principalId: functionApp.identity.principalId
    }
}


resource roleAssignment3 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
    name: guid('roleStorageQueueDataContributor-${storageAccountName}')
    properties: {
      roleDefinitionId: resourceId('Microsoft.Authorization/roleDefinitions', '974c5e8b-45b9-4653-ba55-5f855dd0fb88')
      principalId: functionApp.identity.principalId
    }
}

output functionAppPrincipalId string = functionApp.identity.principalId
output hostName string = functionApp.properties.defaultHostName
output functionBaseUrl string = 'https://${functionApp.properties.defaultHostName}'