published on Wednesday, Jul 29, 2026 by Pulumi
published on Wednesday, Jul 29, 2026 by Pulumi
Full view of the custom domain suffix configuration for ASEv3.
Uses Azure REST API version 2025-05-01. In version 2.x of the Azure Native provider, it used API version 2022-09-01.
Other available API versions: 2022-03-01, 2022-09-01, 2023-01-01, 2023-12-01, 2024-04-01, 2024-11-01, 2025-03-01, 2026-03-01-preview, 2026-03-15. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native web [ApiVersion]. See the version guide for details.
Example Usage
Update ASE custom DNS suffix configuration
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var appServiceEnvironmentAseCustomDnsSuffixConfiguration = new AzureNative.Web.AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfiguration", new()
{
CertificateUrl = "https://test-kv.vault.azure.net/secrets/contosocert",
DnsSuffix = "contoso.com",
KeyVaultReferenceIdentity = "/subscriptions/34adfa4f-cedf-4dc0-ba29-b6d1a69ab345/resourcegroups/test-rg/providers/microsoft.managedidentity/userassignedidentities/test-user-mi",
Name = "test-ase",
ResourceGroupName = "test-rg",
});
});
package main
import (
web "github.com/pulumi/pulumi-azure-native-sdk/web/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := web.NewAppServiceEnvironmentAseCustomDnsSuffixConfiguration(ctx, "appServiceEnvironmentAseCustomDnsSuffixConfiguration", &web.AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs{
CertificateUrl: pulumi.String("https://test-kv.vault.azure.net/secrets/contosocert"),
DnsSuffix: pulumi.String("contoso.com"),
KeyVaultReferenceIdentity: pulumi.String("/subscriptions/34adfa4f-cedf-4dc0-ba29-b6d1a69ab345/resourcegroups/test-rg/providers/microsoft.managedidentity/userassignedidentities/test-user-mi"),
Name: pulumi.String("test-ase"),
ResourceGroupName: pulumi.String("test-rg"),
})
if err != nil {
return err
}
return nil
})
}
pulumi {
required_providers {
azure-native = {
source = "pulumi/azure-native"
}
}
}
resource "azure-native_web_appserviceenvironmentasecustomdnssuffixconfiguration" "appServiceEnvironmentAseCustomDnsSuffixConfiguration" {
certificate_url = "https://test-kv.vault.azure.net/secrets/contosocert"
dns_suffix = "contoso.com"
key_vault_reference_identity = "/subscriptions/34adfa4f-cedf-4dc0-ba29-b6d1a69ab345/resourcegroups/test-rg/providers/microsoft.managedidentity/userassignedidentities/test-user-mi"
name = "test-ase"
resource_group_name = "test-rg"
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.web.AppServiceEnvironmentAseCustomDnsSuffixConfiguration;
import com.pulumi.azurenative.web.AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var appServiceEnvironmentAseCustomDnsSuffixConfiguration = new AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfiguration", AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs.builder()
.certificateUrl("https://test-kv.vault.azure.net/secrets/contosocert")
.dnsSuffix("contoso.com")
.keyVaultReferenceIdentity("/subscriptions/34adfa4f-cedf-4dc0-ba29-b6d1a69ab345/resourcegroups/test-rg/providers/microsoft.managedidentity/userassignedidentities/test-user-mi")
.name("test-ase")
.resourceGroupName("test-rg")
.build());
}
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const appServiceEnvironmentAseCustomDnsSuffixConfiguration = new azure_native.web.AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfiguration", {
certificateUrl: "https://test-kv.vault.azure.net/secrets/contosocert",
dnsSuffix: "contoso.com",
keyVaultReferenceIdentity: "/subscriptions/34adfa4f-cedf-4dc0-ba29-b6d1a69ab345/resourcegroups/test-rg/providers/microsoft.managedidentity/userassignedidentities/test-user-mi",
name: "test-ase",
resourceGroupName: "test-rg",
});
import pulumi
import pulumi_azure_native as azure_native
app_service_environment_ase_custom_dns_suffix_configuration = azure_native.web.AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfiguration",
certificate_url="https://test-kv.vault.azure.net/secrets/contosocert",
dns_suffix="contoso.com",
key_vault_reference_identity="/subscriptions/34adfa4f-cedf-4dc0-ba29-b6d1a69ab345/resourcegroups/test-rg/providers/microsoft.managedidentity/userassignedidentities/test-user-mi",
name="test-ase",
resource_group_name="test-rg")
resources:
appServiceEnvironmentAseCustomDnsSuffixConfiguration:
type: azure-native:web:AppServiceEnvironmentAseCustomDnsSuffixConfiguration
properties:
certificateUrl: https://test-kv.vault.azure.net/secrets/contosocert
dnsSuffix: contoso.com
keyVaultReferenceIdentity: /subscriptions/34adfa4f-cedf-4dc0-ba29-b6d1a69ab345/resourcegroups/test-rg/providers/microsoft.managedidentity/userassignedidentities/test-user-mi
name: test-ase
resourceGroupName: test-rg
Create AppServiceEnvironmentAseCustomDnsSuffixConfiguration Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new AppServiceEnvironmentAseCustomDnsSuffixConfiguration(name: string, args: AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs, opts?: CustomResourceOptions);@overload
def AppServiceEnvironmentAseCustomDnsSuffixConfiguration(resource_name: str,
args: AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs,
opts: Optional[ResourceOptions] = None)
@overload
def AppServiceEnvironmentAseCustomDnsSuffixConfiguration(resource_name: str,
opts: Optional[ResourceOptions] = None,
name: Optional[str] = None,
resource_group_name: Optional[str] = None,
certificate_url: Optional[str] = None,
dns_suffix: Optional[str] = None,
key_vault_reference_identity: Optional[str] = None,
kind: Optional[str] = None)func NewAppServiceEnvironmentAseCustomDnsSuffixConfiguration(ctx *Context, name string, args AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs, opts ...ResourceOption) (*AppServiceEnvironmentAseCustomDnsSuffixConfiguration, error)public AppServiceEnvironmentAseCustomDnsSuffixConfiguration(string name, AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs args, CustomResourceOptions? opts = null)
public AppServiceEnvironmentAseCustomDnsSuffixConfiguration(String name, AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs args)
public AppServiceEnvironmentAseCustomDnsSuffixConfiguration(String name, AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs args, CustomResourceOptions options)
type: azure-native:web:AppServiceEnvironmentAseCustomDnsSuffixConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "azure-native_web_app_service_environment_ase_custom_dns_suffix_configuration" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var appServiceEnvironmentAseCustomDnsSuffixConfigurationResource = new AzureNative.Web.AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfigurationResource", new()
{
Name = "string",
ResourceGroupName = "string",
CertificateUrl = "string",
DnsSuffix = "string",
KeyVaultReferenceIdentity = "string",
Kind = "string",
});
example, err := web.NewAppServiceEnvironmentAseCustomDnsSuffixConfiguration(ctx, "appServiceEnvironmentAseCustomDnsSuffixConfigurationResource", &web.AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs{
Name: pulumi.String("string"),
ResourceGroupName: pulumi.String("string"),
CertificateUrl: pulumi.String("string"),
DnsSuffix: pulumi.String("string"),
KeyVaultReferenceIdentity: pulumi.String("string"),
Kind: pulumi.String("string"),
})
resource "azure-native_web_app_service_environment_ase_custom_dns_suffix_configuration" "appServiceEnvironmentAseCustomDnsSuffixConfigurationResource" {
lifecycle {
create_before_destroy = true
}
name = "string"
resource_group_name = "string"
certificate_url = "string"
dns_suffix = "string"
key_vault_reference_identity = "string"
kind = "string"
}
var appServiceEnvironmentAseCustomDnsSuffixConfigurationResource = new AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfigurationResource", AppServiceEnvironmentAseCustomDnsSuffixConfigurationArgs.builder()
.name("string")
.resourceGroupName("string")
.certificateUrl("string")
.dnsSuffix("string")
.keyVaultReferenceIdentity("string")
.kind("string")
.build());
app_service_environment_ase_custom_dns_suffix_configuration_resource = azure_native.web.AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfigurationResource",
name="string",
resource_group_name="string",
certificate_url="string",
dns_suffix="string",
key_vault_reference_identity="string",
kind="string")
const appServiceEnvironmentAseCustomDnsSuffixConfigurationResource = new azure_native.web.AppServiceEnvironmentAseCustomDnsSuffixConfiguration("appServiceEnvironmentAseCustomDnsSuffixConfigurationResource", {
name: "string",
resourceGroupName: "string",
certificateUrl: "string",
dnsSuffix: "string",
keyVaultReferenceIdentity: "string",
kind: "string",
});
type: azure-native:web:AppServiceEnvironmentAseCustomDnsSuffixConfiguration
properties:
certificateUrl: string
dnsSuffix: string
keyVaultReferenceIdentity: string
kind: string
name: string
resourceGroupName: string
AppServiceEnvironmentAseCustomDnsSuffixConfiguration Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The AppServiceEnvironmentAseCustomDnsSuffixConfiguration resource accepts the following input properties:
- Name string
- Name of the App Service Environment.
- Resource
Group stringName - The name of the resource group. The name is case insensitive.
- Certificate
Url string - The URL referencing the Azure Key Vault certificate secret that should be used as the default SSL/TLS certificate for sites with the custom domain suffix.
- Dns
Suffix string - The default custom domain suffix to use for all sites deployed on the ASE.
- Key
Vault stringReference Identity - The user-assigned identity to use for resolving the key vault certificate reference. If not specified, the system-assigned ASE identity will be used if available.
- Kind string
- Kind of resource.
- Name string
- Name of the App Service Environment.
- Resource
Group stringName - The name of the resource group. The name is case insensitive.
- Certificate
Url string - The URL referencing the Azure Key Vault certificate secret that should be used as the default SSL/TLS certificate for sites with the custom domain suffix.
- Dns
Suffix string - The default custom domain suffix to use for all sites deployed on the ASE.
- Key
Vault stringReference Identity - The user-assigned identity to use for resolving the key vault certificate reference. If not specified, the system-assigned ASE identity will be used if available.
- Kind string
- Kind of resource.
- name string
- Name of the App Service Environment.
- resource_
group_ stringname - The name of the resource group. The name is case insensitive.
- certificate_
url string - The URL referencing the Azure Key Vault certificate secret that should be used as the default SSL/TLS certificate for sites with the custom domain suffix.
- dns_
suffix string - The default custom domain suffix to use for all sites deployed on the ASE.
- key_
vault_ stringreference_ identity - The user-assigned identity to use for resolving the key vault certificate reference. If not specified, the system-assigned ASE identity will be used if available.
- kind string
- Kind of resource.
- name String
- Name of the App Service Environment.
- resource
Group StringName - The name of the resource group. The name is case insensitive.
- certificate
Url String - The URL referencing the Azure Key Vault certificate secret that should be used as the default SSL/TLS certificate for sites with the custom domain suffix.
- dns
Suffix String - The default custom domain suffix to use for all sites deployed on the ASE.
- key
Vault StringReference Identity - The user-assigned identity to use for resolving the key vault certificate reference. If not specified, the system-assigned ASE identity will be used if available.
- kind String
- Kind of resource.
- name string
- Name of the App Service Environment.
- resource
Group stringName - The name of the resource group. The name is case insensitive.
- certificate
Url string - The URL referencing the Azure Key Vault certificate secret that should be used as the default SSL/TLS certificate for sites with the custom domain suffix.
- dns
Suffix string - The default custom domain suffix to use for all sites deployed on the ASE.
- key
Vault stringReference Identity - The user-assigned identity to use for resolving the key vault certificate reference. If not specified, the system-assigned ASE identity will be used if available.
- kind string
- Kind of resource.
- name str
- Name of the App Service Environment.
- resource_
group_ strname - The name of the resource group. The name is case insensitive.
- certificate_
url str - The URL referencing the Azure Key Vault certificate secret that should be used as the default SSL/TLS certificate for sites with the custom domain suffix.
- dns_
suffix str - The default custom domain suffix to use for all sites deployed on the ASE.
- key_
vault_ strreference_ identity - The user-assigned identity to use for resolving the key vault certificate reference. If not specified, the system-assigned ASE identity will be used if available.
- kind str
- Kind of resource.
- name String
- Name of the App Service Environment.
- resource
Group StringName - The name of the resource group. The name is case insensitive.
- certificate
Url String - The URL referencing the Azure Key Vault certificate secret that should be used as the default SSL/TLS certificate for sites with the custom domain suffix.
- dns
Suffix String - The default custom domain suffix to use for all sites deployed on the ASE.
- key
Vault StringReference Identity - The user-assigned identity to use for resolving the key vault certificate reference. If not specified, the system-assigned ASE identity will be used if available.
- kind String
- Kind of resource.
Outputs
All input properties are implicitly available as output properties. Additionally, the AppServiceEnvironmentAseCustomDnsSuffixConfiguration resource produces the following output properties:
- Azure
Api stringVersion - The Azure API version of the resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- Provisioning
Details string - Provisioning
State string - System
Data Pulumi.Azure Native. Web. Outputs. System Data Response - Azure Resource Manager metadata containing createdBy and modifiedBy information.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- Azure
Api stringVersion - The Azure API version of the resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- Provisioning
Details string - Provisioning
State string - System
Data SystemData Response - Azure Resource Manager metadata containing createdBy and modifiedBy information.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- azure_
api_ stringversion - The Azure API version of the resource.
- id string
- The provider-assigned unique ID for this managed resource.
- provisioning_
details string - provisioning_
state string - system_
data object - Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- azure
Api StringVersion - The Azure API version of the resource.
- id String
- The provider-assigned unique ID for this managed resource.
- provisioning
Details String - provisioning
State String - system
Data SystemData Response - Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- azure
Api stringVersion - The Azure API version of the resource.
- id string
- The provider-assigned unique ID for this managed resource.
- provisioning
Details string - provisioning
State string - system
Data SystemData Response - Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- azure_
api_ strversion - The Azure API version of the resource.
- id str
- The provider-assigned unique ID for this managed resource.
- provisioning_
details str - provisioning_
state str - system_
data SystemData Response - Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type str
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- azure
Api StringVersion - The Azure API version of the resource.
- id String
- The provider-assigned unique ID for this managed resource.
- provisioning
Details String - provisioning
State String - system
Data Property Map - Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
Supporting Types
SystemDataResponse, SystemDataResponseArgs
Metadata pertaining to creation and last modification of the resource.- Created
At string - The timestamp of resource creation (UTC).
- Created
By string - The identity that created the resource.
- Created
By stringType - The type of identity that created the resource.
- Last
Modified stringAt - The timestamp of resource last modification (UTC)
- Last
Modified stringBy - The identity that last modified the resource.
- Last
Modified stringBy Type - The type of identity that last modified the resource.
- Created
At string - The timestamp of resource creation (UTC).
- Created
By string - The identity that created the resource.
- Created
By stringType - The type of identity that created the resource.
- Last
Modified stringAt - The timestamp of resource last modification (UTC)
- Last
Modified stringBy - The identity that last modified the resource.
- Last
Modified stringBy Type - The type of identity that last modified the resource.
- created_
at string - The timestamp of resource creation (UTC).
- created_
by string - The identity that created the resource.
- created_
by_ stringtype - The type of identity that created the resource.
- last_
modified_ stringat - The timestamp of resource last modification (UTC)
- last_
modified_ stringby - The identity that last modified the resource.
- last_
modified_ stringby_ type - The type of identity that last modified the resource.
- created
At String - The timestamp of resource creation (UTC).
- created
By String - The identity that created the resource.
- created
By StringType - The type of identity that created the resource.
- last
Modified StringAt - The timestamp of resource last modification (UTC)
- last
Modified StringBy - The identity that last modified the resource.
- last
Modified StringBy Type - The type of identity that last modified the resource.
- created
At string - The timestamp of resource creation (UTC).
- created
By string - The identity that created the resource.
- created
By stringType - The type of identity that created the resource.
- last
Modified stringAt - The timestamp of resource last modification (UTC)
- last
Modified stringBy - The identity that last modified the resource.
- last
Modified stringBy Type - The type of identity that last modified the resource.
- created_
at str - The timestamp of resource creation (UTC).
- created_
by str - The identity that created the resource.
- created_
by_ strtype - The type of identity that created the resource.
- last_
modified_ strat - The timestamp of resource last modification (UTC)
- last_
modified_ strby - The identity that last modified the resource.
- last_
modified_ strby_ type - The type of identity that last modified the resource.
- created
At String - The timestamp of resource creation (UTC).
- created
By String - The identity that created the resource.
- created
By StringType - The type of identity that created the resource.
- last
Modified StringAt - The timestamp of resource last modification (UTC)
- last
Modified StringBy - The identity that last modified the resource.
- last
Modified StringBy Type - The type of identity that last modified the resource.
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:web:AppServiceEnvironmentAseCustomDnsSuffixConfiguration customDnsSuffix /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/hostingEnvironments/{name}/configurations/customdnssuffix
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Native pulumi/pulumi-azure-native
- License
- Apache-2.0
published on Wednesday, Jul 29, 2026 by Pulumi