Creating LB with internal static private IP for a SQL AG however do not see this option in azure terraform links?

creating LB with internal static private IP for a SQL AG however do not see this option in azure terraform links? I only see public IP / static parameters for LB creation. Also do not see basic LB sku and standard LB sku options? And if we are creating LB for a couple web servers which will be used internally (intranet only) should we again use internal static private IPs again? These IPs will not be browsed on the public Internet.

If we use basic sku LB which is free there is no option via ARM to add a certificate to this LB? Can I place a certificate on each web server?,… and does this LB automatically distribute traffic to the online server should the other server become offline?

I am wondering if it is just easier to manually configure the LB via ARM then using Terraform since these LB would likely be a infrequently used in our environment?