Hands-On Azure for Developers

Security

We have not covered another important topic yet—Azure Function security. While it is possible to use, for example, Azure Active Directory or social providers as identity sources (and—as a result—add authentication to a function app), by default, functions are secured by their keys. You can check the available keys when you click on the Manage tab:

Depending on the way a function is triggered, different options may be available. Here, you can see what another function app looks like when it is triggered by an HTTP trigger instead of a timer:

As you can see, we have two types of keys available:

• Function Keys: These are designed for ...