Terraform modules define the Azure resource group, Function App, service plan, Blob Storage, Key Vault, virtual network, private endpoints, private DNS zones, and role assignments. Azure DevOps builds and deploys the C# function package to the Function App.
The Function App is now reachable through a private endpoint in the dedicated private-endpoint subnet. It uses managed identity access and VNet integration to Blob Storage and Key Vault through their private endpoints. IP restrictions remain configured for application and SCM access.