azure-arm-template-subsection-to-add-cors-and-apidefinition.json

    // Adds Web Site
    {
      "name": "[variables('webAppNameVar')]",
      "type": "Microsoft.Web/sites",
      "location": "[resourceGroup().location]",
      "apiVersion": "2015-08-01",
      "kind": "apiApp",
      "dependsOn": [
        "[resourceId('Microsoft.Web/serverfarms', parameters('appHostingPlanName'))]"
      ],
      "properties": {
        "name": "[variables('webAppNameVar')]",
        "serverFarmId": "[variables('appHostingPlanIdVar')]",
        "siteConfig": {
          "AlwaysOn": true,
          "apiDefinition": {
            "url": "[concat('https://', reference(concat('Microsoft.Web/sites/', variables('webAppNameVar'))).defaultHostName, '/swagger/docs/v1')]"
          },
          "cors": {
            "allowedOrigins": [
              "*"
            ]
          }
        }
      }