Create HTTPS listener when deploying an app gateway via Bicep.

[simon-windeler]

I'm trying to create an app gateway via Bicep with a HTTPS listener, works fine with a HTTP listener. The cert I wish to use is in a KeyVault and I'm able to retrieve it via Bicep but not sure how to reference it when creating the listener.

Thanks
Simon

[mtessier84]

Something like this. 'webserver' is the name of the certificate in this case

sslCertificates: [ { name: 'webserver' properties: { keyVaultSecretId: 'https://${KeyVaultName}${environment().suffixes.keyvaultDns}/secrets/webserver/' } } ]

httpListeners: [ { name: 'HTTPS' properties: { FrontendIPConfiguration: { Id: '${resourceGroup().id}/providers/Microsoft.Network/applicationGateways/${ApplicationGatewayName}/frontendIPConfigurations/${PublicIPName}' } FrontendPort: { Id: '${resourceGroup().id}/providers/Microsoft.Network/applicationGateways/${ApplicationGatewayName}/frontendPorts/TCP443' } protocol: 'Https' sslCertificate: { id: '${resourceGroup().id}/providers/Microsoft.Network/applicationGateways/${ApplicationGatewayName}/sslCertificates/webserver' } customErrorConfigurations: [ { statusCode: 'HttpStatus502' customErrorPageUrl: customErrorPageUrl } ] } } ]