You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-functions/configure-networking-how-to.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -37,7 +37,7 @@ Use Bicep or Azure Resource Manager (ARM) [quickstart templates](https://github.
37
37
38
38
When you have an existing function app, you can't directly secure the storage account currently being used by the app. You must instead swap-out the existing storage account for a new, secured storage account.
39
39
40
-
As a pre-requisite, you'll need to enable virtual network integration for your function app.
40
+
As a prerequisite, you need to enable virtual network integration for your function app.
41
41
42
42
1. Choose a function app with a storage account that doesn't have service endpoints or private endpoints enabled.
43
43
@@ -51,15 +51,15 @@ Set up a secured storage account for your function app:
51
51
52
52
1. Secure the new storage account in one of the following ways:
53
53
54
-
*[Create a private endpoint](../storage/common/storage-private-endpoints.md#creating-a-private-endpoint). When using private endpoint connections, the storage account must have private endpoints for the `file` and `blob` subresources. For Durable Functions, you must also make `queue` and `table` subresources accessible through private endpoints. Ensure that your function app has access to the virtual network containing the private endpoints.
54
+
*[Create a private endpoint](../storage/common/storage-private-endpoints.md#creating-a-private-endpoint). When you set up private endpoint connections, create private endpoints for the `file` and `blob` subresources. For Durable Functions, you must also make `queue` and `table` subresources accessible through private endpoints. Double check that your function app has access to the virtual network containing the private endpoints.
55
55
56
-
*[Restrict traffic to specific subnets](../storage/common/storage-network-security.md#grant-access-from-a-virtual-network). Ensure that one of the allowed subnets is the one which your function app is network integrated with. Double check that the subnet has a service endpoint to Microsoft.Storage.
56
+
*[Restrict traffic to specific subnets](../storage/common/storage-network-security.md#grant-access-from-a-virtual-network). Ensure that one of the allowed subnets is the one your function app is network integrated with. Double check that the subnet has a service endpoint to Microsoft.Storage.
57
57
58
-
1. Copy the file and blob content from the current storage account used by the function app to the newly secured storage account and file share. [AzCopy](../storage/common/storage-use-azcopy-blobs-copy) and [Azure Storage Explorer](https://techcommunity.microsoft.com/t5/azure-developer-community-blog/azure-tips-and-tricks-how-to-move-azure-storage-blobs-between/ba-p/3545304) are common methods. If you use Azure Storage Explorer, you may need to whitelist your client IP address
58
+
1. Copy the file and blob content from the current storage account used by the function app to the newly secured storage account and file share. [AzCopy](../storage/common/storage-use-azcopy-blobs-copy) and [Azure Storage Explorer](https://techcommunity.microsoft.com/t5/azure-developer-community-blog/azure-tips-and-tricks-how-to-move-azure-storage-blobs-between/ba-p/3545304) are common methods. If you use Azure Storage Explorer, you may need to allow your client IP address into your storage account's firewall.
59
59
60
-
1. Copy the connection string for this storage account. You'll need this for later.
60
+
1. Copy the connection string for this storage account. You need this string for later.
61
61
62
-
Now you are ready to configure your function app to communicate with your secured storage account:
62
+
Now you're ready to configure your function app to communicate with your secured storage account:
63
63
64
64
1.[Enable content share routing](../app-service/configure-vnet-integration-routing#content-share) to have your function app communicate with your storage account through its virtual network.
0 commit comments