Merge pull request #245063 from aishwaryabh/aibhandari

Add docs for SAS token expiration

Author: v-dirichards

articles/azure-functions/TOC.yml

@@ -912,7 +912,9 @@
           - name: AZFD0004
             href: errors-diagnostics/diagnostic-events/azfd0004.md
           - name: AZFD0005
-            href: errors-diagnostics/diagnostic-events/azfd0005.md            
+            href: errors-diagnostics/diagnostic-events/azfd0005.md
+          - name: AZFD0006
+            href: errors-diagnostics/diagnostic-events/azfd0006.md            
     - name: host.json 2.x reference
       href: functions-host-json.md
     - name: host.json 1.x reference

articles/azure-functions/errors-diagnostics/diagnostic-events/azfd0006.md

@@ -0,0 +1,48 @@
+---
+title: "AZFD0006: SAS Token Expiring"
+titleSuffix: "Azure Functions"
+description: "AZFD0006: SAS token expiring"
+author: aishwaryabh
+ms.author: aibhandari
+ms.topic: troubleshooting
+ms.date: 08/03/2023
+
+---
+
+# AZFD0006: SAS Token Expiring Warning
+
+
+This event occurs when an SAS token in an application setting is set to expire within 45 days.
+
+
+| | Value |
+|-|-|
+| **Event ID** |AZFD0006|
+| **Category** |[Usage]|
+| **Severity** |Warning|
+
+## Event description
+
+This warning event occurs when an SAS token within a URI is set to expire within 45 days. If the token has already expired, an error event will be triggered.
+
+
+Functions currently only checks the following application settings for expiring SAS tokens: 
++ [`WEBSITE_RUN_FROM_PACKAGE`](../../functions-app-settings.md#website_run_from_package) 
++ [`AzureWebJobsStorage`](../../functions-app-settings.md#azurewebjobsstorage)
++ [`WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`](../../functions-app-settings.md#website_contentazurefileconnectionstring)
+The warning message specifies which variable has the SAS token that's going to expire and how much time is left.
+
+
+
+## How to resolve the event
+
+There are two ways to resolve this event:
+
++ Renew the SAS token so that it doesn't expire within the next 45 days and set the new value in application settings. For more information, see [Manually uploading a package to Blob Storage](../../run-functions-from-deployment-package.md#manually-uploading-a-package-to-blob-storage).
+
++ Switch to using managed identities instead relying on using an SAS URI. For more information, see [Fetch a package from Azure Blob Storage using a managed identity](../../run-functions-from-deployment-package.md#fetch-a-package-from-azure-blob-storage-using-a-managed-identity).
+
+
+## When to suppress the event
+
+This event shouldn't be suppressed.