@gradientedge/cdk-utils-azure 2.33.0 → 2.35.0

package/dist/src/common/constants.d.ts

@@ -1,7 +1,13 @@
-/** @category Enum */
+/**
+ * Supported remote backend types for Azure infrastructure state management
+ * @category Enum
+ */
 export declare enum AzureRemoteBackend {
+    /** Azure Resource Manager backend for storing state in Azure Blob Storage */
     azurerm = "azurerm",
+    /** Pulumi Cloud backend for managed state storage */
     pulumi = "pulumi",
+    /** Local file system backend for development and testing */
     local = "local"
 }
 /**

package/dist/src/common/constants.js

@@ -1,8 +1,14 @@
-/** @category Enum */
+/**
+ * Supported remote backend types for Azure infrastructure state management
+ * @category Enum
+ */
 export var AzureRemoteBackend;
 (function (AzureRemoteBackend) {
+    /** Azure Resource Manager backend for storing state in Azure Blob Storage */
     AzureRemoteBackend["azurerm"] = "azurerm";
+    /** Pulumi Cloud backend for managed state storage */
     AzureRemoteBackend["pulumi"] = "pulumi";
+    /** Local file system backend for development and testing */
     AzureRemoteBackend["local"] = "local";
 })(AzureRemoteBackend || (AzureRemoteBackend = {}));
 /**

package/dist/src/common/construct.d.ts

@@ -25,34 +25,81 @@ import { CommonAzureStackProps } from './types.js';
  * @category Common
  */
 export declare class CommonAzureConstruct extends ComponentResource {
+    /** Stack properties for the construct */
     props: CommonAzureStackProps;
+    /** Optional Pulumi component resource options */
     options?: ComponentResourceOptions;
+    /** Unique identifier for the construct */
     id: string;
+    /** The Azure resource group associated with this construct */
     resourceGroup: ResourceGroup;
+    /** The fully qualified domain name derived from domainName and subDomain */
     fullyQualifiedDomainName: string;
+    /** Manager for Azure RBAC role assignments */
     authorisationManager: AzureAuthorisationManager;
+    /** Manager for Azure API Management resources */
     apiManagementManager: AzureApiManagementManager;
+    /** Manager for Azure App Configuration resources */
     appConfigurationManager: AzureAppConfigurationManager;
+    /** Manager for Azure App Service resources */
     appServiceManager: AzureAppServiceManager;
+    /** Manager for Azure Application Insights resources */
     applicationInsightsManager: AzureApplicationInsightsManager;
+    /** Manager for Azure CosmosDB resources */
     cosmosDbManager: AzureCosmosDbManager;
+    /** Manager for Azure DNS resources */
     dnsManager: AzureDnsManager;
+    /** Manager for Azure Event Grid resources */
     eventgridManager: AzureEventgridManager;
+    /** Manager for Azure Function App resources */
     functionManager: AzureFunctionManager;
+    /** Manager for Azure Key Vault resources */
     keyVaultManager: AzureKeyVaultManager;
+    /** Manager for Azure Log Analytics Workspace resources */
     operationalInsightsManager: AzureOperationalInsightsManager;
+    /** Manager for Azure Portal Dashboard resources */
     portalManager: AzurePortalManager;
+    /** Manager for Azure Monitor diagnostic settings */
     monitorManager: AzureMonitorManager;
+    /** Manager for Azure Managed Redis (Enterprise) resources */
     redisManager: AzureRedisManager;
+    /** Manager for Azure Resource Group resources */
     resourceGroupManager: AzureResourceGroupManager;
+    /** Formatter for Azure resource names based on naming conventions */
     resourceNameFormatter: AzureResourceNameFormatter;
+    /** Manager for Azure Security Center (Defender) resources */
     securityCentermanager: AzureSecurityCentermanager;
+    /** Manager for Azure Service Bus resources */
     serviceBusManager: AzureServiceBusManager;
+    /** Manager for Azure Storage resources */
     storageManager: AzureStorageManager;
+    /** Shared Log Analytics Workspace resolved from props, used for diagnostic logging */
     commonLogAnalyticsWorkspace: Workspace | Output<GetWorkspaceResult>;
+    /**
+     * @summary Create a new CommonAzureConstruct
+     * @param name the scoped name of the construct
+     * @param props the common Azure stack properties
+     * @param options optional Pulumi component resource options
+     */
     constructor(name: string, props: CommonAzureStackProps, options?: ComponentResourceOptions);
+    /**
+     * @summary Resolve a Pulumi stack reference for cross-stack outputs
+     * @param id scoped id of the stack reference resource
+     * @param stackName optional fully qualified stack name; defaults to id if not provided
+     */
     protected resolveStack(id: string, stackName?: string): pulumi.StackReference;
+    /**
+     * @summary Create the resource group for this construct
+     * - Uses the resourceGroupName from props or falls back to the construct id
+     * - Registers resource group id and name as stack outputs
+     * - No-op if the resource group already exists
+     */
     protected createResourceGroup(): void;
+    /**
+     * @summary Resolve a shared Log Analytics Workspace from props
+     * - Populates the commonLogAnalyticsWorkspace property for use in diagnostic settings
+     * - No-op if commonLogAnalyticsWorkspace is not configured in props
+     */
     protected resolveCommonLogAnalyticsWorkspace(): void;
     /**
      * @summary Determine the fully qualified domain name based on domainName & subDomain

package/dist/src/common/construct.js

@@ -24,29 +24,58 @@ import { AzureResourceNameFormatter } from './resource-name-formatter.js';
  * @category Common
  */
 export class CommonAzureConstruct extends ComponentResource {
+    /** Unique identifier for the construct */
     id;
+    /** The Azure resource group associated with this construct */
     resourceGroup;
+    /** The fully qualified domain name derived from domainName and subDomain */
     fullyQualifiedDomainName;
+    /** Manager for Azure RBAC role assignments */
     authorisationManager;
+    /** Manager for Azure API Management resources */
     apiManagementManager;
+    /** Manager for Azure App Configuration resources */
     appConfigurationManager;
+    /** Manager for Azure App Service resources */
     appServiceManager;
+    /** Manager for Azure Application Insights resources */
     applicationInsightsManager;
+    /** Manager for Azure CosmosDB resources */
     cosmosDbManager;
+    /** Manager for Azure DNS resources */
     dnsManager;
+    /** Manager for Azure Event Grid resources */
     eventgridManager;
+    /** Manager for Azure Function App resources */
     functionManager;
+    /** Manager for Azure Key Vault resources */
     keyVaultManager;
+    /** Manager for Azure Log Analytics Workspace resources */
     operationalInsightsManager;
+    /** Manager for Azure Portal Dashboard resources */
     portalManager;
+    /** Manager for Azure Monitor diagnostic settings */
     monitorManager;
+    /** Manager for Azure Managed Redis (Enterprise) resources */
     redisManager;
+    /** Manager for Azure Resource Group resources */
     resourceGroupManager;
+    /** Formatter for Azure resource names based on naming conventions */
     resourceNameFormatter;
+    /** Manager for Azure Security Center (Defender) resources */
     securityCentermanager;
+    /** Manager for Azure Service Bus resources */
     serviceBusManager;
+    /** Manager for Azure Storage resources */
     storageManager;
+    /** Shared Log Analytics Workspace resolved from props, used for diagnostic logging */
     commonLogAnalyticsWorkspace;
+    /**
+     * @summary Create a new CommonAzureConstruct
+     * @param name the scoped name of the construct
+     * @param props the common Azure stack properties
+     * @param options optional Pulumi component resource options
+     */
     constructor(name, props, options) {
         super(`construct:${name}`, name, props, options);
         this.props = props;
@@ -73,6 +102,11 @@ export class CommonAzureConstruct extends ComponentResource {
         this.storageManager = new AzureStorageManager();
         this.determineFullyQualifiedDomain();
     }
+    /**
+     * @summary Resolve a Pulumi stack reference for cross-stack outputs
+     * @param id scoped id of the stack reference resource
+     * @param stackName optional fully qualified stack name; defaults to id if not provided
+     */
     resolveStack(id, stackName) {
         const name = stackName ?? id;
         if (!name)
@@ -81,6 +115,12 @@ export class CommonAzureConstruct extends ComponentResource {
             name,
         });
     }
+    /**
+     * @summary Create the resource group for this construct
+     * - Uses the resourceGroupName from props or falls back to the construct id
+     * - Registers resource group id and name as stack outputs
+     * - No-op if the resource group already exists
+     */
     createResourceGroup() {
         if (this.resourceGroup)
             return;
@@ -93,6 +133,11 @@ export class CommonAzureConstruct extends ComponentResource {
             resourceGroupName: this.resourceGroup.name,
         });
     }
+    /**
+     * @summary Resolve a shared Log Analytics Workspace from props
+     * - Populates the commonLogAnalyticsWorkspace property for use in diagnostic settings
+     * - No-op if commonLogAnalyticsWorkspace is not configured in props
+     */
     resolveCommonLogAnalyticsWorkspace() {
         if (!this.props.commonLogAnalyticsWorkspace || !this.props.commonLogAnalyticsWorkspace.workspaceName)
             return;

package/dist/src/common/resource-name-formatter.d.ts

@@ -7,7 +7,12 @@ import { AzureResourceNameFormatterProps, CommonAzureStackProps } from '../index
  * @category Common
  */
 export declare class AzureResourceNameFormatter {
+    /** Stack properties containing naming configuration */
     props: CommonAzureStackProps;
+    /**
+     * @summary Create a new AzureResourceNameFormatter
+     * @param props the common Azure stack properties containing naming configuration
+     */
     constructor(props: CommonAzureStackProps);
     /**
      * @summary Helper method to format azure resource name based on the provided options

package/dist/src/common/resource-name-formatter.js

@@ -6,7 +6,12 @@
  * @category Common
  */
 export class AzureResourceNameFormatter {
+    /** Stack properties containing naming configuration */
     props;
+    /**
+     * @summary Create a new AzureResourceNameFormatter
+     * @param props the common Azure stack properties containing naming configuration
+     */
     constructor(props) {
         this.props = props;
     }

package/dist/src/common/stack.d.ts

@@ -17,11 +17,22 @@ import { CommonAzureStackProps } from './types.js';
  * @category Common
  */
 export declare class CommonAzureStack extends ComponentResource {
+    /** Default Node.js runtime version for Azure Function Apps */
     static NODEJS_RUNTIME: string;
+    /** The construct instance created by this stack */
     construct: CommonAzureConstruct;
+    /** Stack properties including environment-specific configuration */
     props: CommonAzureStackProps;
+    /** Pulumi config instance for reading stack configuration values */
     config: Config;
+    /** Registered stack outputs for cross-stack references */
     outputs?: Record<string, unknown>;
+    /**
+     * @summary Create a new CommonAzureStack
+     * @param name the scoped name of the stack
+     * @param props the common Azure stack properties
+     * @param options optional Pulumi component resource options
+     */
     constructor(name: string, props: CommonAzureStackProps, options?: ComponentResourceOptions);
     /**
      * @summary Method to determine the core construct properties injected via context
@@ -41,12 +52,30 @@ export declare class CommonAzureStack extends ComponentResource {
      * - Primary use is to have layered config for each environment which is injected into the context
      */
     protected determineStageContexts(): any;
+    /**
+     * @summary Create the construct instance for this stack
+     * - Override in subclasses to provision infrastructure resources
+     */
     protected createConstruct(): void;
+    /**
+     * @summary Register stack outputs for cross-stack consumption
+     * - Registers resource group id and name if a construct with a resource group exists
+     */
     protected registerOutputs(): void;
     /**
      * @summary Determine the fully qualified domain name based on domainName & subDomain
      */
     protected fullyQualifiedDomain(): string;
+    /**
+     * @summary Walk up the directory tree to locate the infrastructure root containing the stage context path
+     * @returns The directory path containing the stage context configuration
+     * @throws Error if the stage context directory cannot be found within 6 parent directories
+     */
     protected static determineEnvironmentProperty(): string;
+    /**
+     * @summary Retrieve a specific property from the stage-specific environment configuration file
+     * @param property the property key to retrieve from the environment config
+     * @returns The value of the requested property from the stage config JSON
+     */
     protected static getEnvironmentProperty(property: string): any;
 }

package/dist/src/common/stack.js

@@ -21,11 +21,22 @@ import { registerTagTransformation } from './tagging.js';
  * @category Common
  */
 export class CommonAzureStack extends ComponentResource {
+    /** Default Node.js runtime version for Azure Function Apps */
     static NODEJS_RUNTIME = '22';
+    /** The construct instance created by this stack */
     construct;
+    /** Stack properties including environment-specific configuration */
     props;
+    /** Pulumi config instance for reading stack configuration values */
     config;
+    /** Registered stack outputs for cross-stack references */
     outputs;
+    /**
+     * @summary Create a new CommonAzureStack
+     * @param name the scoped name of the stack
+     * @param props the common Azure stack properties
+     * @param options optional Pulumi component resource options
+     */
     constructor(name, props, options) {
         super(`stack:${name}`, name, props, options);
         /* initialise config */
@@ -113,7 +124,15 @@ export class CommonAzureStack extends ComponentResource {
         /* parse as JSON properties */
         return JSON.parse(stageContextPropsBuffer.toString('utf-8'));
     }
+    /**
+     * @summary Create the construct instance for this stack
+     * - Override in subclasses to provision infrastructure resources
+     */
     createConstruct() { }
+    /**
+     * @summary Register stack outputs for cross-stack consumption
+     * - Registers resource group id and name if a construct with a resource group exists
+     */
     registerOutputs() {
         if (this.construct && this.construct.resourceGroup) {
             this.outputs = _.merge(this.outputs, {
@@ -131,6 +150,11 @@ export class CommonAzureStack extends ComponentResource {
         const subDomain = this.props.subDomain;
         return subDomain ? `${subDomain}.${domainName}` : domainName;
     }
+    /**
+     * @summary Walk up the directory tree to locate the infrastructure root containing the stage context path
+     * @returns The directory path containing the stage context configuration
+     * @throws Error if the stage context directory cannot be found within 6 parent directories
+     */
     static determineEnvironmentProperty() {
         const config = new Config();
         const stageContextPath = config.get('stageContextPath');
@@ -147,6 +171,11 @@ export class CommonAzureStack extends ComponentResource {
         }
         throw new Error('Could not locate infrastructure root (pulumi-env/ not found)');
     }
+    /**
+     * @summary Retrieve a specific property from the stage-specific environment configuration file
+     * @param property the property key to retrieve from the environment config
+     * @returns The value of the requested property from the stage config JSON
+     */
     static getEnvironmentProperty(property) {
         const config = new Config();
         const stage = config.get('stage');

package/dist/src/common/types.d.ts

@@ -2,60 +2,109 @@ import { GetComponentOutputArgs } from '@pulumi/azure-native/applicationinsights
 import { GetWorkspaceOutputArgs } from '@pulumi/azure-native/operationalinsights/index.js';
 import { BaseProps } from '@gradientedge/cdk-utils-common';
 import { AzureLocation, AzureRemoteBackend } from './constants.js';
-/** @category Interface */
+/**
+ * Configuration for an Azure location/region
+ * @category Interface
+ */
 export interface AzureLocationConfig {
+    /** Unique identifier for the location */
     id: string;
+    /** Display name of the location */
     name: string;
 }
 /**
  * @interface CommonAzureStackProps
  * Common properties for Azure stack configuration using Pulumi
  */
-/** @category Interface */
+/**
+ * Common properties for Azure stack configuration using Pulumi
+ * @category Interface
+ */
 export interface CommonAzureStackProps extends BaseProps {
+    /** Optional Pulumi stack name for cross-stack references */
     stackName?: string;
+    /** Optional Azure resource group name override */
     resourceGroupName?: string;
+    /** Remote backend configuration for Pulumi state storage */
     remoteBackend?: AzureRemoteBackendProps;
+    /** Global prefix applied to all resource names */
     globalPrefix?: string;
+    /** Global suffix applied to all resource names */
     globalSuffix?: string;
+    /** Prefix applied to individual resource names */
     resourcePrefix?: string;
+    /** Suffix applied to individual resource names */
     resourceSuffix?: string;
+    /** Per-resource naming options keyed by resource type identifier */
     resourceNameOptions?: {
         [key: string]: AzureResourceNameFormatterProps;
     };
+    /** Primary Azure region for resource deployment */
     location: AzureLocation;
+    /** Location configuration map for multi-region deployments */
     locationConfig?: Record<AzureLocation, AzureLocationConfig>;
+    /** List of supported locales for the deployment */
     locales?: string[];
+    /** Default tags applied to all taggable Azure resources */
     defaultTags?: {
         [key: string]: string;
     };
+    /** Shared Log Analytics Workspace lookup arguments for diagnostic logging */
     commonLogAnalyticsWorkspace?: GetWorkspaceOutputArgs;
+    /** Shared Application Insights component lookup arguments for telemetry */
     commonApplicationInsights?: GetComponentOutputArgs;
+    /** Azure subscription ID for the deployment */
     subscriptionId?: string;
+    /** Azure Active Directory tenant ID */
     tenantId?: string;
+    /** Service principal client ID for authentication */
     clientId?: string;
+    /** Service principal client secret for authentication */
     clientSecret?: string;
+    /** Azure cloud environment (e.g. 'public', 'usgovernment') */
     environment?: string;
+    /** Enable OpenID Connect (OIDC) authentication */
     useOidc?: boolean;
+    /** OIDC request token for federated identity */
     oidcRequestToken?: string;
+    /** OIDC request URL for federated identity */
     oidcRequestUrl?: string;
+    /** Enable Managed Service Identity (MSI) authentication */
     useMsi?: boolean;
+    /** Custom MSI endpoint URL */
     msiEndpoint?: string;
 }
-/** @category Interface */
+/**
+ * Properties for configuring Azure remote backend state storage
+ * @category Interface
+ */
 export interface AzureRemoteBackendProps {
+    /** The type of remote backend to use */
     type: AzureRemoteBackend;
+    /** Azure Storage Account name for state storage */
     storageAccountName?: string;
+    /** Azure Storage container name for state files */
     containerName?: string;
+    /** Resource group containing the storage account */
     resourceGroupName?: string;
+    /** Azure subscription ID for the backend storage account */
     subscriptionId?: string;
+    /** State file key/path within the container */
     key?: string;
 }
-/** @category Interface */
+/**
+ * Options to control the formatting of Azure resource names
+ * @category Interface
+ */
 export interface AzureResourceNameFormatterProps {
+    /** When true, excludes both prefix and suffix from the formatted name */
     exclude?: boolean;
+    /** When true, includes the global prefix from stack props */
     globalPrefix?: boolean;
+    /** When true, includes the global suffix from stack props */
     globalSuffix?: boolean;
+    /** Custom prefix for this specific resource name */
     prefix?: string;
+    /** Custom suffix for this specific resource name */
     suffix?: string;
 }

package/dist/src/construct/event-handler/main.d.ts

@@ -18,9 +18,13 @@ import { AzureEventHandlerProps, EventHandlerEventGridSubscription, EventHandler
  * @category Construct
  */
 export declare class AzureEventHandler extends AzureFunctionApp {
+    /** Event handler properties */
     props: AzureEventHandlerProps;
+    /** Provisioned EventGrid subscription resources including dead-letter storage */
     eventGridEventSubscription: EventHandlerEventGridSubscription;
+    /** The provisioned or resolved EventGrid topic */
     eventGridTopic: Topic | Output<GetTopicResult>;
+    /** Provisioned Service Bus resources (namespace and queue) */
     serviceBus: EventHandlerServiceBus;
     /**
      * @summary Create a new AzureEventHandler

package/dist/src/construct/event-handler/main.js

@@ -18,9 +18,13 @@ import { AzureFunctionApp } from '../function-app/index.js';
  * @category Construct
  */
 export class AzureEventHandler extends AzureFunctionApp {
+    /** Event handler properties */
     props;
+    /** Provisioned EventGrid subscription resources including dead-letter storage */
     eventGridEventSubscription;
+    /** The provisioned or resolved EventGrid topic */
     eventGridTopic;
+    /** Provisioned Service Bus resources (namespace and queue) */
     serviceBus;
     /**
      * @summary Create a new AzureEventHandler

package/dist/src/construct/event-handler/types.d.ts

@@ -4,40 +4,77 @@ import { BlobContainer, StorageAccount } from '@pulumi/azure-native/storage/inde
 import { Input, Output } from '@pulumi/pulumi';
 import { DefenderForStorageProps, EventgridEventSubscriptionProps, EventgridTopicProps, ServiceBusNamespaceProps, ServiceBusQueueProps, StorageAccountProps, StorageContainerProps } from '../../services/index.js';
 import { AzureFunctionAppProps } from '../function-app/index.js';
-/** @category Interface */
+/**
+ * Properties for the EventGrid subscription dead-letter queue storage
+ * @category Interface
+ */
 export interface EventHandlerEventGridSubscriptionProps {
+    /** Storage account properties for the dead-letter queue */
     dlqStorageAccount: StorageAccountProps;
+    /** Storage container properties for the dead-letter queue */
     dlqStorageContainer: StorageContainerProps;
 }
-/** @category Interface */
+/**
+ * Provisioned EventGrid subscription resources including dead-letter storage
+ * @category Interface
+ */
 export interface EventHandlerEventGridSubscription {
+    /** The provisioned dead-letter queue storage account */
     dlqStorageAccount?: StorageAccount;
+    /** The provisioned dead-letter queue storage container */
     dlqStorageContainer?: BlobContainer;
+    /** The provisioned EventGrid event subscription */
     eventSubscription?: EventSubscription;
 }
-/** @category Interface */
+/**
+ * Properties for configuring the Service Bus integration in the event handler
+ * @category Interface
+ */
 export interface EventHandlerServiceBusProps {
+    /** Service Bus namespace properties */
     namespace?: ServiceBusNamespaceProps;
+    /** Service Bus queue properties */
     queue?: ServiceBusQueueProps;
+    /** When true, resolves an existing Service Bus instead of creating a new one */
     useExisting?: boolean;
 }
-/** @category Interface */
+/**
+ * Provisioned Service Bus resources for the event handler
+ * @category Interface
+ */
 export interface EventHandlerServiceBus {
+    /** The provisioned or resolved Service Bus namespace */
     namespace: Namespace | Output<GetNamespaceResult>;
+    /** The provisioned or resolved Service Bus queue */
     queue: Queue | Output<GetQueueResult>;
 }
-/** @category Interface */
+/**
+ * Properties for configuring the EventGrid topic in the event handler
+ * @category Interface
+ */
 export interface EventHandlerEventGridTopicProps extends EventgridTopicProps {
+    /** When true, resolves an existing EventGrid topic instead of creating a new one */
     useExistingTopic: boolean;
+    /** Subscription ID of the existing EventGrid topic (for cross-subscription access) */
     existingSubscriptionId?: string;
+    /** Name of the existing EventGrid topic to resolve */
     existingTopicName?: string;
+    /** Resource group name of the existing EventGrid topic */
     existingResourceGroupName?: Input<string>;
 }
-/** @category Interface */
+/**
+ * Properties for the {@link AzureEventHandler} construct
+ * @category Interface
+ */
 export interface AzureEventHandlerProps extends AzureFunctionAppProps {
+    /** Microsoft Defender for Storage configuration */
     defender?: DefenderForStorageProps;
+    /** EventGrid event subscription properties */
     eventGridEventSubscription?: EventgridEventSubscriptionProps;
+    /** EventGrid subscription dead-letter queue storage properties */
     eventGridSubscription: EventHandlerEventGridSubscriptionProps;
+    /** EventGrid topic properties */
     eventGridTopic: EventHandlerEventGridTopicProps;
+    /** Service Bus integration properties */
     serviceBus?: EventHandlerServiceBusProps;
 }

package/dist/src/construct/function-app/main.d.ts

@@ -25,28 +25,51 @@ import { AzureFunctionAppProps } from './types.js';
  * @category Construct
  */
 export declare class AzureFunctionApp extends CommonAzureConstruct {
+    /** Function app properties */
     props: AzureFunctionAppProps;
+    /** The provisioned Azure Function App web app resource */
     app: WebApp;
+    /** The provisioned App Service Plan for the function app */
     appServicePlan: AppServicePlan;
+    /** Environment variables to inject into the function app configuration */
     appEnvironmentVariables: Record<string, any>;
+    /** The provisioned storage account for the function app */
     appStorageAccount: StorageAccount;
+    /** The provisioned storage container for deployment artifacts */
     appDeploymentStorageContainer: BlobContainer;
+    /** The provisioned storage container for function app data */
     appStorageContainer: BlobContainer;
+    /** The provisioned or resolved App Configuration store */
     appConfig: ConfigurationStore | Output<GetConfigurationStoreResult>;
+    /** The archive file output for the function app deployment package */
     appCodeArchiveFile: Output<archive.GetFileResult>;
+    /** Hash of the app configuration for change detection */
     appConfigHash: string;
+    /** Map of resource group names to sets of Key Vault names for role assignments */
     appKeyVaultsByResourceGroup: Map<string, Set<string>>;
+    /** Connection strings to configure on the function app */
     appConnectionStrings: any[];
+    /** Prefix for App Configuration key names */
     appConfigPrefix?: string;
+    /** Parsed app configuration data (processed version) */
     appConfigurationsParsedConfig: any;
+    /** Parsed app configuration data (original version before processing) */
     appConfigurationsOriginalParsedConfig: any;
+    /** The provisioned Key Vault for data storage secrets */
     dataKeyVault: Vault;
+    /** The provisioned data storage account */
     dataStorageAccount: StorageAccount;
+    /** The provisioned data storage container */
     dataStorageContainer: BlobContainer;
+    /** The resolved Application Insights component for telemetry */
     applicationInsights: Output<GetComponentResult>;
+    /** The provisioned Azure Portal dashboard for monitoring */
     functionDashboard: Dashboard;
+    /** Role assignment granting the function app access to the storage account */
     storageRoleAssignment: RoleAssignment;
+    /** Role assignment granting the function app access to the App Configuration store */
     appConfigRoleAssignment: RoleAssignment;
+    /** Role assignment granting the function app access to EventGrid topics */
     eventGridRoleAssignment: RoleAssignment;
     /**
      * @summary Create a new AzureFunctionApp