How can achievable using the Bicep template return a callback URL as a secure output

[piy49]

We need to enable the Logic App (LA) module to return a callback URL as a secure output, so it can be safely consumed by downstream modules or callers, and this should be achievable using the Bicep template below.

Below logic app bicep template

@description('App service containing the workflow runtime')
resource site 'Microsoft.Web/sites@2024-11-01' = {
name: <LOGIC_APP_NAME>
location: location
kind: 'functionapp,workflowapp'
identity: {
type: 'SystemAssigned'
}
properties: {
virtualNetworkSubnetId:
hostNameSslStates: [
{
name: '${<LOGIC_APP_NAME>}.azurewebsites.net'
sslState: 'Disabled'
hostType: 'Standard'
}
{
name: '${<LOGIC_APP_NAME>}.scm.azurewebsites.net'
sslState: 'Disabled'
hostType: 'Repository'
}
]
siteConfig: {
appSettings: concat([
{
name: 'FUNCTIONS_EXTENSION_VERSION'
value: '~4'
}
{
name: 'FUNCTIONS_WORKER_RUNTIME'
value: 'node'
}
{
name: 'WEBSITE_NODE_DEFAULT_VERSION'
value: '~20'
}
{
name: 'AzureWebJobsStorage'
value: 'DefaultEndpointsProtocol=https;AccountName=${<STORAGE_ACCOUNT_NAME>};...'
}
{
name: 'WEBSITE_CONTENTAZUREFILECONNECTIONSTRING'
value: 'DefaultEndpointsProtocol=https;AccountName=${<STORAGE_ACCOUNT_NAME>};...'
}
{
name: 'WEBSITE_CONTENTSHARE'
value: '${<STORAGE_ACCOUNT_NAME>}-content'
}
{
name: 'AzureFunctionsJobHost__extensionBundle__id'
value: 'Microsoft.Azure.Functions.ExtensionBundle.Workflows'
}
{
name: 'AzureFunctionsJobHost__extensionBundle__version'
value: '[1.*, 2.0.0)'
}
{
name: 'APP_KIND'
value: 'workflowApp'
}
{
name: 'WORKFLOWS_TENANT_ID'
value: subscription().tenantId
}
{
name: 'WORKFLOWS_SUBSCRIPTION_ID'
value: subscription().subscriptionId
}
{
name: 'WORKFLOWS_RESOURCE_GROUP_NAME'
value: resourceGroup().name
}
{
name: 'WORKFLOWS_LOCATION_NAME'
value: location
}
{
name: 'Environment'
value: environment
}
{
name: 'AzureWebJobsFeatureFlags'
value: 'EnableMultiLanguageWorker'
}
]
use32BitWorkerProcess: true
cors: {
allowedOrigins: [
'https://portal.azure.com'
]
}
minTlsVersion: '1.2'
ftpsState: 'FtpsOnly'
nodeVersion: '~20'
}
serverFarmId: <APPSERVICE_PLAN_ID>
publicNetworkAccess: 'Disabled'
outboundVnetRouting: {
allTraffic: false
applicationTraffic: true
contentShareTraffic: true
imagePullTraffic: false
backupRestoreTraffic: false
}
scmSiteAlsoStopped: false
clientAffinityEnabled: false
clientCertEnabled: false
clientCertMode: 'Required'
hostNamesDisabled: false
customDomainVerificationId: '<CUSTOM_DOMAIN_VERIFICATION_ID>'
containerSize: 1536
dailyMemoryTimeQuota: 0
httpsOnly: true
redundancyMode: 'None'
storageAccountRequired: false
keyVaultReferenceIdentity: 'SystemAssigned'
}
tags: tags
}