Using MSI to call another Web/Function App
I see this question come up every so often around how to call another function or web app with MSI that is configured to use the built in Authentication. The steps to setting up the authentication and authorization can be found in steps 1-3 of this previous blog. The UX has since changed so I…
App Service Network Troubleshooting
My basic process behind debugging any sort of networking issue is to reduce the complexity of the issue and walk up the basic network stack. Often times we overlook a basic problem such as DNS resolution issues or the incorrect reference in code that can cause hours, days, or weeks going down a rabbit hole.…
Azure Functions Access to Restricted Storage Accounts
With requirements for additional security, many customers have started enforcing network restrictions on their Azure storage accounts. This in turn can cause major issues with Azure Functions without the proper configuration, as Azure functions rely heavily on Azure storage for functionality. Background Azure storage There are two core concepts for Azure Functions related to Azure…
Troubleshooting Azure Functions
Troubleshooting Azure Function issues related to the host runtime can sometimes be cumbersome. Having worked in support for a number of years I’ve learned a couple useful tricks. Before we start understanding the behavior of each trigger type is very important. Here’s a previous blog that I use on a daily basis as my cheat…
Connecting to App Service’s Kudu endpoint programmatically
I recently worked on a case where a customer wanted to programmatically connect to Kudu. I’m not well versed in XML parsing (which Azure Powershell pulls for the publish profile) so I went the route of using the Azure CLI’s az rest command to pull the JSON publish profile and extracting the username and password.
Azure Web App/Function App Authentication and Authorization References
Here’s a dump of authentication related articles and blogs for Authentication and Authorization formerly known as Easy Auth. Note its always good to read through the comments of the blogs and forum post to get helpful tidbits you may have otherwise missed. If you find another article please feel free to leave a comment and…
Accessing Graph API with an Azure Function through Impersonation
Azure functions allow developers to focus on business logic. With the addition of the built in Authentication and Authorization feature a simple application can be developed that pulls specific information about a logged in user from graph API without having to write any code that requests access tokens on behalf of the user. Background The…
Application Initialization with Azure Functions
TL/DR You can warm up a function app using an applicationhost.config transform with an appliationhost.xdt. This ONLY works with Windows as application initialization is a concept built into IIS. I’m not aware of the same feature set available in Linux. Skip to the config section for the transformation setup. Background A couple months ago I…
Application Insights Integration with Function Apps in Azure Government or other Clouds
The use of the APPLICATIONINSIGHTS_CONNECTION_STRING in Azure Functions is now built into the runtime. Note my examples are for Azure US Government cloud but this can ultimately be used in any cloud with the correct endpoints specified. ********Update 4/28/2020********The Application Insights product team updated the certificate so you can now use the following connection string…
Azure Function Trigger Reference Guide
This is a quick reference covering general topics for the most common Azure Function triggers I deal with on a weekly basis. Its by no means a conclusive list or troubleshooting guide but hopefully it can be used as quick read/refresher. Azure CosmosDB/DocumentDB Azure EventGridAzure Eventhub/Azure IoT HubAzure ServicebusAzure Storage BlobsAzure Storage QueuesHTTP Timer Azure…
