I'm now onto frontdoor. Which I'm not sure I'm going to be able to do using the resources from the Azure-Native api. Essentially, I need the same thing, but for a shared Frontdoor, then for the backend pools, and the backends within them. So Frontdoor is part of the "shared stack" but the backends are added by the services. A kind "delegated" ownership scenario. I'm thinking that I may need to resort to the Azure APIs using the approach that Mikhail showed.