Azure Web App access restrictions to a specific Azure Front Door instance

accessRestrictions.bicep

resource siteConfig 'Microsoft.Web/sites/config@2023-12-01' = {
  parent: existingWebApp
  name: 'web'
  properties: {
    ipSecurityRestrictions: [
      {
        ipAddress: 'AzureFrontDoor.Backend'
        action: 'Allow'
        tag: 'ServiceTag'
        priority: 100
        name: 'Allow traffic from Front Door'
        headers: {
          'x-azure-fdid': [
            frontDoorProfile.properties.frontDoorId //Scoping access to a unique Front Door instance
          ]
        }
      }
    ]
  }
}