Function app is not publicly accessible

# Disable public network access for the Function App
resource "azurerm_linux_function_app" "<example_resource_name>" {
  name                       = "<example_resource_name>"
  location                   = azurerm_resource_group.main.location
  resource_group_name        = azurerm_resource_group.main.name
  service_plan_id            = azurerm_service_plan.main.id
  storage_account_name       = azurerm_storage_account.main.name
  storage_account_access_key = azurerm_storage_account.main.primary_access_key

  public_network_access_enabled = false # Critical: disables public endpoint access
}

// Disable public access by denying all unmatched traffic
resource functionApp 'Microsoft.Web/sites@2022-09-01' existing = {
  name: '<example_resource_name>'
}

resource siteConfig 'Microsoft.Web/sites/config@2022-09-01' = {
  name: '${functionApp.name}/web'
  properties: {
    ipSecurityRestrictionsDefaultAction: 'Deny' // Critical: blocks public access via default endpoint
  }
}