how-to-secure-functions.md

How to - Securing your Azure Function

Paul's secret mision "do this, and dont do that"

Using indentity

Using identity for AzureWebJobsStorage

Using identity for Bindings

Using identity for Deployment

Networking

Setting up vnet in your function app

Private storage endpoints & DNS

Bindings specific VNET/endpoints (Top N)

Deployment

Use Flex consumption

Use RFP=url + blob url (no azure files)

HTTP Access

Function keys

Easy auth

APIM

CORS (portal has to be fixed)