From 78ebc409588de40d90ae9b45e6ff51ce844b0d6c Mon Sep 17 00:00:00 2001
From: NickGraham101 <nick.graham101@googlemail.com>
Date: Thu, 9 Jun 2022 15:50:21 +0100
Subject: [PATCH] Split the appServiceAllowedIPs ARM parameter in 2

This allows separate access restrictions to be passed to the front and
backend apps.
---
 azure/finance.template.json | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/azure/finance.template.json b/azure/finance.template.json
index e70ea3bef4..450b36c217 100644
--- a/azure/finance.template.json
+++ b/azure/finance.template.json
@@ -70,9 +70,11 @@
         "sharedApimName": {
             "type": "string"
         },
-        "appServiceAllowedIPs": {
-            "type": "array",
-            "defaultValue": []
+        "backEndAccessRestrictions": {
+            "type": "array"
+        },
+        "frontEndAccessRestrictions": {
+            "type": "array"
         },
         "sharedSQLServerName": {
             "type": "string"
@@ -269,7 +271,7 @@
                         "value": "[if(greater(length(parameters('uiCustomHostname')), 0), reference('ui-app-service-certificate', '2018-11-01').outputs.certificateThumbprint.value, '')]"
                     },
                     "ipSecurityRestrictions": {
-                        "value": "[parameters('appServiceAllowedIPs')]"
+                        "value": "[parameters('frontEndAccessRestrictions')]"
                     }
                 }
             }
@@ -379,7 +381,7 @@
                         "value": "[if(greater(length(parameters('apiCustomHostname')), 0), reference('api-app-service-certificate', '2018-11-01').outputs.certificateThumbprint.value, '')]"
                     },
                     "ipSecurityRestrictions": {
-                        "value": "[parameters('appServiceAllowedIPs')]"
+                        "value": "[parameters('backEndAccessRestrictions')]"
                     }
                 }
             }