Add App configuration AFD template by MaryanneNjeri · Pull Request #14668 · Azure/azure-quickstart-templates

MaryanneNjeri · 2026-01-26T18:46:12Z

PR Checklist

Check these items before submitting a PR...

Contribution Guide

Best Practice Guide

- Please check this box once you've submitted the PR if you've read through the Contribution Guide and best practices checklist.

Changelog

avanigupta · 2026-02-13T18:53:02Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/README.md

+
+## Prerequisites
+
+Before you begin, ensure you have:


Can we add our AFD doc link somewhere? https://aka.ms/appconfig/azurefrontdoor

Updated to add AFD doc link

avanigupta · 2026-02-13T18:55:24Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/README.md

+
+
+
+`Tags: Azure4Student, AppConfiguration, Beginner, Microsoft.Storage/storageAccounts, Microsoft.Network/publicIPAddresses, Microsoft.Network/virtualNetworks, Microsoft.Network/networkInterfaces, Microsoft.Compute/virtualMachines`


Are these standard tags used in other ARM templates? If there's room for improvement here, we should add front door/cdn specific tags

Yes some most of our App config templates have these tags, I saw for the cdn templates they have the tag Tags: Microsoft.Resources/deployments, Microsoft.Web/serverfarms, Microsoft.Web/sites, Microsoft.Cdn/profiles, Microsoft.Cdn/profiles/afdEndpoints, Microsoft.Cdn/profiles/originGroups, Microsoft.Cdn/profiles/originGroups/origins, Microsoft.Cdn/profiles/afdEndpoints/routes.

I just want to confirm the tags we should add are Microsoft.Cdn/profiles, Microsoft.Cdn/profiles/afdEndpoints, Microsoft.Cdn/profiles/originGroups, Microsoft.Cdn/profiles/originGroups/origins, Microsoft.Cdn/profiles/afdEndpoints/routes ?

avanigupta · 2026-02-13T18:55:45Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/README.md

+1. App Configuration Data Owner or App Configuration Data Reader role
+
+
+Add the following key-values to you Azure App Configuration store:


Suggested change

Add the following key-values to you Azure App Configuration store:

Add the following key-value to your Azure App Configuration store:

Thanks for catching this, updated.

avanigupta · 2026-02-13T18:56:26Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/README.md

+Before you begin, ensure you have:
+
+1. An active Azure subscription
+1. An existing Azure App Configuration store. To create an App Configuration store using ARM template, see [App Configuration store](https://azure.microsoft.com/resources/templates/101-app-configuration-store/).


This link is invalid

My bad, thanks for catching this. Updated

avanigupta · 2026-02-13T18:57:23Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/README.md

+1. An existing Azure App Configuration store. To create an App Configuration store using ARM template, see [App Configuration store](https://azure.microsoft.com/resources/templates/101-app-configuration-store/).
+1. Permissions to create and manage Azure Front Door resources (Contributor or equivalent)
+1. Permissions to assign roles on the App Configuration resource (Owner or User Access Administrator)
+1. App Configuration Data Owner or App Configuration Data Reader role


We can add the same prereq from public docs:
Basic understanding of CDN and content delivery concepts

Yes, updated to have the same prereq as the public docs

avanigupta · 2026-02-13T19:03:11Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/README.md

@@ -0,0 +1,60 @@
+---
+description: This template creates an Azure FrontDoor resource and connects an existing App Configuration store to the newly created Azure Front Door resource.


Can you add a short description about the AFD endpoint setup? I think its ok if the description is slightly longer than usual since this is a more advanced scenario

Updated description to include the AFD endpoint set up, please let me know what you think

avanigupta · 2026-02-13T19:08:49Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/azuredeploy.json

+        },
+        "configurationStoreName": {
+            "type": "string",
+            "defaultValue": "[format('appconfig-{0}', uniqueString(resourceGroup().id))]",


Are you creating a config store in this template or using a pre-existing one?

If user passes the name of a pre-existing store the template will update the store, if user doesn't then a new store will be created.

avanigupta · 2026-02-13T19:10:21Z

...tarts/microsoft.appconfiguration/app-configuration-afd/nestedtemplates/createAFDProfile.json

+        },
+        "afdResourceSku": {
+            "type": "string",
+            "defaultValue": "Premium_AzureFrontDoor",


We can use Standard AFD in the template. Premium is not necessary if standard has origin auth support.

Updated sku to Standard

avanigupta · 2026-02-13T19:11:01Z

...arts/microsoft.appconfiguration/app-configuration-afd/nestedtemplates/updateConfigStore.json

+                "name": "[parameters('skuName')]"
+            },
+            "properties": {
+                "disableLocalAuth": true,


why disable local auth?

avanigupta · 2026-02-13T19:14:38Z

quickstarts/microsoft.appconfiguration/app-configuration-afd/azuredeploy.json

+        "updateConfigStoreUrl": "[uri(parameters('_artifactsLocation'), concat('nestedtemplates/updateConfigStore.json', parameters('_artifactsLocationSasToken')))]",
+        "roleAssignmentUrl": "[uri(parameters('_artifactsLocation'), concat('nestedtemplates/roleAssignment.json', parameters('_artifactsLocationSasToken')))]"
+    },
+    "resources": [


From copilot:

The configurationStore and frontDoorChildResources nested deployments are missing "expressionEvaluationOptions": { "scope": "inner" }, while frontDoor and roleAssignment have it. This inconsistency can lead to unexpected expression evaluation behavior (e.g., resourceGroup() evaluated in the outer vs. inner scope). All nested templates should consistently use "scope": "inner".

This has been updated, thanks

avanigupta · 2026-02-13T19:18:00Z

...icrosoft.appconfiguration/app-configuration-afd/nestedtemplates/createAFDChildResources.json

+                                "queryStringCachingBehavior": "IncludeSpecifiedQueryStrings",
+                                "queryParameters": "after,api-version,key,label,snapshot,tags",
+                                "cacheBehavior": "OverrideAlways",
+                                "cacheDuration": "00:10:10"


Why not 10 minutes?

My bad it should be 10mins, not 10mins 10seconds. Updated to 10mins which is represented as 00:10:00

Add App configuration AFD template

a599731

MaryanneNjeri marked this pull request as draft January 26, 2026 18:46

azure-quickstarts added readme violations README violations during PR best practices violations labels Jan 26, 2026

Maryanne Gichohi added 2 commits January 28, 2026 21:36

Add missing badges

edec151

Add missing links

a379886

azure-quickstarts removed the readme violations README violations during PR label Jan 28, 2026

Maryanne Gichohi added 4 commits January 28, 2026 21:49

Add missing links

8836305

Updated to move nestedtemplates to its own folder

f498610

Fix expressions

d9401b9

Update store properties

1ef3718

azure-quickstarts removed the best practices violations label Jan 29, 2026

Maryanne Gichohi added 6 commits January 29, 2026 21:59

Update template

57cd29b

Update template

d67bf44

Fix missing parenthesis

64b8157

Set default values for origin, origin group name etc

fce1411

Fix rule set name

8bc5a24

Fix rule set naming

741686c

MaryanneNjeri marked this pull request as ready for review February 1, 2026 07:35

avanigupta reviewed Feb 13, 2026

View reviewed changes

Maryanne Gichohi added 3 commits February 17, 2026 16:39

Address PR comments

3bb4818

Updated to not disableLocalAuth

b8fa154

Minor update

4d146e3

azure-quickstarts added the BPA label Feb 17, 2026




		`Tags: Azure4Student, AppConfiguration, Beginner, Microsoft.Storage/storageAccounts, Microsoft.Network/publicIPAddresses, Microsoft.Network/virtualNetworks, Microsoft.Network/networkInterfaces, Microsoft.Compute/virtualMachines` No newline at end of file

		1. App Configuration Data Owner or App Configuration Data Reader role


		Add the following key-values to you Azure App Configuration store:

	Add the following key-values to you Azure App Configuration store:
	Add the following key-value to your Azure App Configuration store:

		@@ -0,0 +1,60 @@
		---
		description: This template creates an Azure FrontDoor resource and connects an existing App Configuration store to the newly created Azure Front Door resource.

Conversation

MaryanneNjeri commented Jan 26, 2026

PR Checklist

Changelog

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Comments