Hands-On Serverless Computing

Authorization keys

An Azure Function app has HTTP triggers that let you use keys to add security to your Functions. There are multiple ways keys can be used within Azure Function apps. Webhooks can use these to add authorization to requests and you can enforce a HTTP trigger for a Function requiring these API keys. Keys are managed as part of your Azure Function app and are stored at rest.

There are two types of key that you can set on an Azure Function App:

• Host keys: These keys are shared by all functions within an Azure Function app. When these Host keys are used as an API key, they allow access to any function within the function app.
• Function keys: Function keys apply only to the specific functions under which they are defined. When ...