module thisStorage 'br/SMARTAIM:storage:latest' = {
  name: '${deployment().name}-s'
  dependsOn: [
    thisManagedIdentity
  ]
  params: {
    location: location
    managedIdentityUserAssignedIdentities: managedIdentityUserAssignedIdentities
    storageStorageAccounts: storageStorageAccounts
    tags: tags
  }
}

param storageStorageAccounts = {
  staticweb: {
    name: 'sptlsaappstaticweb'
    kind: 'StorageV2'
    isHnsEnabled: false
    defaultToOAuthAuthentication: true
    allowSharedKeyAccess: false
    sku: {
      name: 'Standard_ZRS'
    }
    accessTier: 'Hot'
    networkAcls: {
      bypass: 'Logging,Metrics,AzureServices'
    }
  }
  asset: {
    name: 'sptlsaappasset'
    kind: 'StorageV2'
    isHnsEnabled: false
    sku: {
      name: 'Standard_ZRS'
    }
    accessTier: 'Hot'
    allowBlobPublicAccess: true
    networkAcls: {
      bypass: 'Logging,Metrics,AzureServices'
      defaultAction: 'Allow'
    }
  }
  blobServices: {
    cors: {
      corsRules: [
        {
          allowedHeaders: [
            '*'
          ]
          allowedMethods: [
            'GET'
          ]
        }
      ]
    }
  }
}

param networkPrivateEndpoints = {
  cognitiveServicesAccountsTextAnalyticsAccount: { ... }
  keyVaultVaultsAppsVault: { ... }
  documentDBDatabaseAccountsPrivateSql: { ... }
  searchSearchServicesPrivateSearchService: { ... }
  eventHubNamespacesPrivateNamespace: { ... }
  signalRServiceSignalRPrivateSignalR: { ... }
  storageStorageAccountsAssetBlob: {
    name: 'sptlsaappasset.blob'
    privateLinkServiceConnections: [
      {
        privateLinkServiceId: {
          resourceType: 'Microsoft.Storage/storageAccounts'
          name: 'sptlsaappasset'
        }
        groupIds: [
          'blob'
        ]
        subnet: {
          name: 'Applications'
        }
        privateDnsZoneGroups: {
          privateDnsZoneConfigs: [
            {
              name: 'blob'
              type: 'blob'
            }
          ]
        }
      }
    ]
  }
}