Add CORS Rules to Bicep (#1345)

* setup cors in bicep * limit allowed origins * Update infra/main.bicep --------- Co-authored-by: Matt Wicks [SSW] <wicksipedia@users.noreply.github.com>
SSWConsulting · May 14, 2024 · f23dd2e · f23dd2e
1 parent 697a084
commit f23dd2e
Showing 1 changed file with 29 additions and 0 deletions.
diff --git a/infra/main.bicep b/infra/main.bicep
@@ -50,6 +50,35 @@ resource storageAccount 'Microsoft.Storage/storageAccounts@2021-06-01' = {
   }
 }
 
+resource blobServices 'Microsoft.Storage/storageAccounts/blobServices@2022-09-01' = {
+  name: 'default'
+  parent: storageAccount
+  properties: {
+    cors: {
+      corsRules: [
+        {
+          allowedHeaders: [
+            '*'
+          ]
+          allowedMethods: [
+            'GET'
+            'HEAD'
+            'OPTIONS'
+          ]
+          allowedOrigins: [
+            'https://ssw.com.au'
+            'https://www.ssw.com.au'
+          ]
+          exposedHeaders: [
+            '*'
+          ]
+          maxAgeInSeconds: 86400
+        }
+      ]
+    }
+  }
+}
+
 resource managedIdentity 'Microsoft.ManagedIdentity/userAssignedIdentities@2018-11-30' = {
   name: 'DeploymentScript'
   location: location