Microsoft.Cdn profiles/endpoints

Bicep resource definition

The profiles/endpoints resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Cdn/profiles/endpoints resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.Cdn/profiles/endpoints@2025-09-01-preview' = {
  parent: resourceSymbolicName
  location: 'string'
  name: 'string'
  properties: {
    contentTypesToCompress: [
      'string'
    ]
    defaultOriginGroup: {
      id: 'string'
    }
    deliveryPolicy: {
      description: 'string'
      rules: [
        {
          actions: [
            {
              name: 'string'
              // For remaining properties, see DeliveryRuleAction objects
            }
          ]
          conditions: [
            {
              name: 'string'
              // For remaining properties, see DeliveryRuleCondition objects
            }
          ]
          name: 'string'
          order: int
        }
      ]
    }
    geoFilters: [
      {
        action: 'string'
        countryCodes: [
          'string'
        ]
        relativePath: 'string'
      }
    ]
    isCompressionEnabled: bool
    isHttpAllowed: bool
    isHttpsAllowed: bool
    optimizationType: 'string'
    originGroups: [
      {
        name: 'string'
        properties: {
          healthProbeSettings: {
            probeIntervalInSeconds: int
            probePath: 'string'
            probeProtocol: 'string'
            probeRequestType: 'string'
          }
          origins: [
            {
              id: 'string'
            }
          ]
          responseBasedOriginErrorDetectionSettings: {
            httpErrorRanges: [
              {
                begin: int
                end: int
              }
            ]
            responseBasedDetectedErrorTypes: 'string'
            responseBasedFailoverThresholdPercentage: int
          }
          trafficRestorationTimeToHealedOrNewEndpointsInMinutes: int
        }
      }
    ]
    originHostHeader: 'string'
    originPath: 'string'
    origins: [
      {
        name: 'string'
        properties: {
          enabled: bool
          hostName: 'string'
          httpPort: int
          httpsPort: int
          originHostHeader: 'string'
          priority: int
          privateLinkAlias: 'string'
          privateLinkApprovalMessage: 'string'
          privateLinkLocation: 'string'
          privateLinkResourceId: 'string'
          weight: int
        }
      }
    ]
    probePath: 'string'
    queryStringCachingBehavior: 'string'
    urlSigningKeys: [
      {
        keyId: 'string'
        keySourceParameters: {
          resourceGroupName: 'string'
          secretName: 'string'
          secretVersion: 'string'
          subscriptionId: 'string'
          typeName: 'string'
          vaultName: 'string'
        }
      }
    ]
    webApplicationFirewallPolicyLink: {
      id: 'string'
    }
  }
  tags: {
    {customized property}: 'string'
  }
}

DeliveryRuleAction objects

Set the name property to specify the type of object.

For AfdUrlSigning, use:

{
  name: 'AfdUrlSigning'
  parameters: {
    algorithm: 'string'
    keyGroupReference: {
      id: 'string'
    }
    parameterNameOverride: [
      {
        paramIndicator: 'string'
        paramName: 'string'
      }
    ]
    typeName: 'string'
  }
}

For CacheExpiration, use:

{
  name: 'CacheExpiration'
  parameters: {
    cacheBehavior: 'string'
    cacheDuration: 'string'
    cacheType: 'string'
    typeName: 'string'
  }
}

For CacheKeyQueryString, use:

{
  name: 'CacheKeyQueryString'
  parameters: {
    queryParameters: 'string'
    queryStringBehavior: 'string'
    typeName: 'string'
  }
}

For EdgeAction, use:

{
  name: 'EdgeAction'
  parameters: {
    edgeActionReference: {
      id: 'string'
    }
    invocationPoint: 'string'
    typeName: 'string'
  }
}

For ModifyRequestHeader, use:

{
  name: 'ModifyRequestHeader'
  parameters: {
    headerAction: 'string'
    headerName: 'string'
    typeName: 'string'
    value: 'string'
  }
}

For ModifyResponseHeader, use:

{
  name: 'ModifyResponseHeader'
  parameters: {
    headerAction: 'string'
    headerName: 'string'
    typeName: 'string'
    value: 'string'
  }
}

For OriginGroupOverride, use:

{
  name: 'OriginGroupOverride'
  parameters: {
    originGroup: {
      id: 'string'
    }
    typeName: 'string'
  }
}

For RouteConfigurationOverride, use:

{
  name: 'RouteConfigurationOverride'
  parameters: {
    cacheConfiguration: {
      cacheBehavior: 'string'
      cacheDuration: 'string'
      isCompressionEnabled: 'string'
      queryParameters: 'string'
      queryStringCachingBehavior: 'string'
    }
    originGroupOverride: {
      forwardingProtocol: 'string'
      originGroup: {
        id: 'string'
      }
    }
    typeName: 'string'
  }
}

For UrlRedirect, use:

{
  name: 'UrlRedirect'
  parameters: {
    customFragment: 'string'
    customHostname: 'string'
    customPath: 'string'
    customQueryString: 'string'
    destinationProtocol: 'string'
    redirectType: 'string'
    typeName: 'string'
  }
}

For UrlRewrite, use:

{
  name: 'UrlRewrite'
  parameters: {
    destination: 'string'
    preserveUnmatchedPath: bool
    sourcePattern: 'string'
    typeName: 'string'
  }
}

For UrlSigning, use:

{
  name: 'UrlSigning'
  parameters: {
    algorithm: 'string'
    parameterNameOverride: [
      {
        paramIndicator: 'string'
        paramName: 'string'
      }
    ]
    typeName: 'string'
  }
}

DeliveryRuleCondition objects

Set the name property to specify the type of object.

For ClientPort, use:

{
  name: 'ClientPort'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For Cookies, use:

{
  name: 'Cookies'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    selector: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For HostName, use:

{
  name: 'HostName'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For HttpVersion, use:

{
  name: 'HttpVersion'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For IsDevice, use:

{
  name: 'IsDevice'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For PostArgs, use:

{
  name: 'PostArgs'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    selector: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For QueryString, use:

{
  name: 'QueryString'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For RemoteAddress, use:

{
  name: 'RemoteAddress'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For RequestBody, use:

{
  name: 'RequestBody'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For RequestHeader, use:

{
  name: 'RequestHeader'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    selector: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For RequestMethod, use:

{
  name: 'RequestMethod'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For RequestScheme, use:

{
  name: 'RequestScheme'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For RequestUri, use:

{
  name: 'RequestUri'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For ServerPort, use:

{
  name: 'ServerPort'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For SocketAddr, use:

{
  name: 'SocketAddr'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For SslProtocol, use:

{
  name: 'SslProtocol'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For UrlFileExtension, use:

{
  name: 'UrlFileExtension'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For UrlFileName, use:

{
  name: 'UrlFileName'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

For UrlPath, use:

{
  name: 'UrlPath'
  parameters: {
    matchValues: [
      'string'
    ]
    negateCondition: bool
    operator: 'string'
    transforms: [
      'string'
    ]
    typeName: 'string'
  }
}

Property Values