You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-functions/function-keys-how-to.md
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -78,7 +78,7 @@ When you use Key Vault for key storage, the app settings you need depend on the
78
78
79
79
## Use access keys
80
80
81
-
HTTP triggered functions can generally be called by using a URL in the format: `https://<APP_NAME>.azurewebsites.net/api/<FUNCTION_NAME>`. When the authorization level of a given function is set as a value other than `anonymous`, you must also provide an access key in your request. The access key can either be provided in the URL using the `?code=` query string or in the request header (`x-functions-key`). For more information, see [Access key authorization](functions-bindings-http-webhook-trigger.md#api-key-authorization).
81
+
HTTP triggered functions can generally be called by using a URL that includes the function name. When the authorization level of a given function is set as a value other than `anonymous`, you must also provide an access key in your request. The access key can either be provided in the URL using the `?code=` query string or in the request header (`x-functions-key`). For more information, see [Access key authorization](functions-bindings-http-webhook-trigger.md#api-key-authorization).
82
82
83
83
To access the runtime REST APIs (under `/admin/`), you must provide the master key (`_master`) in the `x-functions-key` request header. You can [remove the admin endpoints](./security-concepts.md#disable-administrative-endpoints) using the `functionsRuntimeAdminIsolationEnabled` site property.
84
84
@@ -101,27 +101,27 @@ You can use these methods to get access keys without having to use the REST APIs
101
101
102
102
1. Select the function app you want to work with.
103
103
104
-
1. In the left pane, expand **Functions**, and then select **App keys**.
104
+
1. In the left menu, expand **Functions**, and then select **App keys**.
105
105
106
106
The **App keys** page appears. On this page the host keys are displayed, which can be used to access any function in the app. The system key is also displayed, which gives anyone administrator-level access to all function app APIs.
107
107
108
108
You can also practice least privilege by using the key for a specific function. You can get function-specific keys from the **Function keys** tab of a specific HTTP-triggered function.
109
109
110
110
### [Azure CLI](#tab/azure-cli)
111
111
112
-
Run the following script in Azure Cloud Shell, the output of which is the `default` host key, which can be used to access any HTTP triggered function in the function app.
112
+
Run the following command in Azure Cloud Shell. The output of the command is the `default` host key, which can be used to access any HTTP triggered function in the function app.
113
113
114
114
```azurecli-interactive
115
115
az functionapp keys list --resource-group <RESOURCE_GROUP> --name <APP_NAME> --query functionKeys.default --output tsv
116
116
```
117
117
118
-
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective.
118
+
Replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name.
119
119
120
120
Because the output contains sensitive information, either don't persist the output or secure any persisted file outputs.
121
121
122
122
### [Azure PowerShell](#tab/azure-powershell)
123
123
124
-
Run the following script, the output of which is the `default` host key, which can be used to access any HTTP triggered function in the function app.
124
+
Run the following script. The output is the `default` host key, which can be used to access any HTTP triggered function in the function app.
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective.
134
+
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name.
135
135
136
136
---
137
137
@@ -156,7 +156,7 @@ You can use these methods to get access keys without having to manually create c
156
156
157
157
1. Select the function app you want to work with.
158
158
159
-
1. In the left pane, expand **Functions**, and then select **App keys**.
159
+
1. In the left menu, expand **Functions**, and then select **App keys**.
160
160
161
161
The **App keys** page appears. On this page the host keys are displayed, which can be used to access any function in the app. The system key is also displayed, which gives anyone administrator-level access to all function app APIs.
162
162
@@ -166,13 +166,13 @@ You can also renew a function key in the **Function keys** tab of a specific HTT
166
166
167
167
### [Azure CLI](#tab/azure-cli)
168
168
169
-
Run the following script in Azure Cloud Shell, which renews the `default` host key with a new key value generated by Functions.
169
+
Run the following command in Azure Cloud Shell, which renews the `default` host key with a new key value generated by Functions.
170
170
171
171
```azurecli-interactive
172
172
az functionapp keys set --resource-group <RESOURCE_GROUP> --name <APP_NAME> --key-type functionKeys --key-name default
173
173
```
174
174
175
-
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective. This script has been created to run in Azure Cloud Shell (Bash). You must modify it to run in a Windows terminal.
175
+
In this command, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name. This command runs in Azure Cloud Shell (Bash). You must modify it to run in a Windows terminal.
176
176
177
177
The new key value generated by Functions is displayed for your reference. This new key value must be securely distributed to any apps that rely on the host key. Because the output contains sensitive information, either don't persist the output or secure any persisted file outputs.
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective.
205
+
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name.
206
206
207
207
The new key value generated by Functions is returned for your reference. It must be securely distributed to any apps that rely on the host key. Because the output contains sensitive information, either don't persist the output or secure any persisted file outputs.
0 commit comments