Skip to content

Commit 3dd4c18

Browse files
Freshness.
1 parent 9311537 commit 3dd4c18

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

articles/azure-functions/function-keys-how-to.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,7 @@ When you use Key Vault for key storage, the app settings you need depend on the
7878

7979
## Use access keys
8080

81-
HTTP triggered functions can generally be called by using a URL in the format: `https://<APP_NAME>.azurewebsites.net/api/<FUNCTION_NAME>`. When the authorization level of a given function is set as a value other than `anonymous`, you must also provide an access key in your request. The access key can either be provided in the URL using the `?code=` query string or in the request header (`x-functions-key`). For more information, see [Access key authorization](functions-bindings-http-webhook-trigger.md#api-key-authorization).
81+
HTTP triggered functions can generally be called by using a URL that includes the function name. When the authorization level of a given function is set as a value other than `anonymous`, you must also provide an access key in your request. The access key can either be provided in the URL using the `?code=` query string or in the request header (`x-functions-key`). For more information, see [Access key authorization](functions-bindings-http-webhook-trigger.md#api-key-authorization).
8282

8383
To access the runtime REST APIs (under `/admin/`), you must provide the master key (`_master`) in the `x-functions-key` request header. You can [remove the admin endpoints](./security-concepts.md#disable-administrative-endpoints) using the `functionsRuntimeAdminIsolationEnabled` site property.
8484

@@ -101,27 +101,27 @@ You can use these methods to get access keys without having to use the REST APIs
101101

102102
1. Select the function app you want to work with.
103103

104-
1. In the left pane, expand **Functions**, and then select **App keys**.
104+
1. In the left menu, expand **Functions**, and then select **App keys**.
105105

106106
The **App keys** page appears. On this page the host keys are displayed, which can be used to access any function in the app. The system key is also displayed, which gives anyone administrator-level access to all function app APIs.
107107

108108
You can also practice least privilege by using the key for a specific function. You can get function-specific keys from the **Function keys** tab of a specific HTTP-triggered function.
109109

110110
### [Azure CLI](#tab/azure-cli)
111111

112-
Run the following script in Azure Cloud Shell, the output of which is the `default` host key, which can be used to access any HTTP triggered function in the function app.
112+
Run the following command in Azure Cloud Shell. The output of the command is the `default` host key, which can be used to access any HTTP triggered function in the function app.
113113

114114
```azurecli-interactive
115115
az functionapp keys list --resource-group <RESOURCE_GROUP> --name <APP_NAME> --query functionKeys.default --output tsv
116116
```
117117

118-
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective.
118+
Replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name.
119119

120120
Because the output contains sensitive information, either don't persist the output or secure any persisted file outputs.
121121

122122
### [Azure PowerShell](#tab/azure-powershell)
123123

124-
Run the following script, the output of which is the `default` host key, which can be used to access any HTTP triggered function in the function app.
124+
Run the following script. The output is the `default` host key, which can be used to access any HTTP triggered function in the function app.
125125

126126
```powershell-interactive
127127
$rGroup = '<RESOURCE_GROUP>'
@@ -131,7 +131,7 @@ $path = "/subscriptions/$((Get-AzContext).Subscription.Id)/resourceGroups/$rGrou
131131
((Invoke-AzRestMethod -Path $path -Method POST).Content | ConvertFrom-JSON).functionKeys.default
132132
```
133133

134-
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective.
134+
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name.
135135

136136
---
137137

@@ -156,7 +156,7 @@ You can use these methods to get access keys without having to manually create c
156156

157157
1. Select the function app you want to work with.
158158

159-
1. In the left pane, expand **Functions**, and then select **App keys**.
159+
1. In the left menu, expand **Functions**, and then select **App keys**.
160160

161161
The **App keys** page appears. On this page the host keys are displayed, which can be used to access any function in the app. The system key is also displayed, which gives anyone administrator-level access to all function app APIs.
162162

@@ -166,13 +166,13 @@ You can also renew a function key in the **Function keys** tab of a specific HTT
166166

167167
### [Azure CLI](#tab/azure-cli)
168168

169-
Run the following script in Azure Cloud Shell, which renews the `default` host key with a new key value generated by Functions.
169+
Run the following command in Azure Cloud Shell, which renews the `default` host key with a new key value generated by Functions.
170170

171171
```azurecli-interactive
172172
az functionapp keys set --resource-group <RESOURCE_GROUP> --name <APP_NAME> --key-type functionKeys --key-name default
173173
```
174174

175-
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective. This script has been created to run in Azure Cloud Shell (Bash). You must modify it to run in a Windows terminal.
175+
In this command, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name. This command runs in Azure Cloud Shell (Bash). You must modify it to run in a Windows terminal.
176176

177177
The new key value generated by Functions is displayed for your reference. This new key value must be securely distributed to any apps that rely on the host key. Because the output contains sensitive information, either don't persist the output or secure any persisted file outputs.
178178

@@ -202,7 +202,7 @@ $response = Invoke-AzRestMethod -Method Post -Uri $uri -Payload $body
202202
($response.Content | ConvertFrom-Json).functionKeys.default
203203
```
204204

205-
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name, respective.
205+
In this script, replace `<RESOURCE_GROUP>` and `<APP_NAME>` with the resource group and your function app name.
206206

207207
The new key value generated by Functions is returned for your reference. It must be securely distributed to any apps that rely on the host key. Because the output contains sensitive information, either don't persist the output or secure any persisted file outputs.
208208

0 commit comments

Comments
 (0)