App Service web app has FTP disabled or FTPS-only enforced

# Enforce FTPS-only on an App Service
resource "azurerm_windows_web_app" "<example_resource_name>" {
  name                = "<example_resource_name>"
  resource_group_name = "<example_resource_name>"
  location            = "<example_resource_name>"
  service_plan_id     = "<example_resource_id>"

  site_config {
    ftps_state = "FtpsOnly" # CRITICAL: Enforces FTPS-only (not AllAllowed)
  }
}

// Configure an existing App Service to enforce FTPS-only
resource webConfig 'Microsoft.Web/sites/config@2022-03-01' = {
  name: '<example_resource_name>/web'
  properties: {
    ftpsState: 'FtpsOnly' // CRITICAL: Sets FTP state to FTPS-only, avoiding insecure 'AllAllowed'
  }
}