az webapp create
Create a web app. Azure CLI reference
28 options Its page in the Azure CLI reference
Options
Show its 28 options
--acr-identityAccept system or user assigned identity which will be set for acr image pull.--acr-use-identityEnable or disable pull image from acr use managed identity--basic-authEnable or disable basic auth for both SCM and FTP Basic Auth Publishing Credentials.--container-image-name, -cThe container custom image name and optionally the tag name (e.g., <registry-name>/<image-name>:<tag>).--container-registry-password, -wThe container registry server password.--container-registry-urlThe container registry server url--container-registry-user, -sThe container registry server username--deployment-container-image-name, -iContainer image name from container registry, e.g. publisher/image-name:tag--deployment-local-git, -lenable local git--deployment-source-branch, -bthe branch to deploy--deployment-source-url, -uGit repository URL to link with manual integration--deployment-zip, -zperform deployment using zip file--domain-name-scopeSpecify the scope of uniqueness for the default hostname during resource creation.--end-to-end-encryption-enabled, -eEnable or disable end-to-end encryption between the Front End and the Workers.--enriched-errorsIf true, Linux web app creation failures will show context-enriched diagnostics with error codes, suggested fixes, and Copilot prompts.--https-onlyRedirect all traffic made to an app using HTTP to HTTPS.--min-tls-cipher-suiteThe minimum TLS Cipher Suite required for requests, e.g., 'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384'--min-tls-versionThe minimum version of TLS required for SSL requests, e.g., '1.0', '1.1', '1.2'--multicontainer-config-file, --multicontainer-config-type, --startup-fileLinux only.--name, -nName of the new web app.--plan, -pname or resource id of the app service plan.--public-network-accessEnable or disable public access to the web app--runtime, -rcanonicalized web runtime in the format of Framework:Version, e.g. "PYTHON:3.14".Use az webapp list-runtimes for available list--site-scoped-certsEnable or disable site-scoped certificates.--sitecontainers-appIf true, a webapp which supports sitecontainers will be created--subnetName or resource ID of the pre-existing subnet to have the webapp join.--tagsspace-separated tags: key[=value] [key[=value] ...].--vnetName or resource ID of the regional virtual network.