Skip to content

Commit 8e15b1b

Browse files
im-samzggailey777
andauthored
Apply suggestions from code review
Glenn's suggestions - thanks! Co-authored-by: Glenn Gailey <[email protected]>
1 parent 04b8a3d commit 8e15b1b

File tree

2 files changed

+10
-8
lines changed

2 files changed

+10
-8
lines changed

articles/azure-functions/configure-networking-how-to.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,9 @@ Set up a secured storage account for your function app:
6868

6969
* [Create a private endpoint](../storage/common/storage-private-endpoints.md#creating-a-private-endpoint). As you set up your private endpoint connection, create private endpoints for the `file` and `blob` subresources. For Durable Functions, you must also make `queue` and `table` subresources accessible through private endpoints. If you're using a custom or on-premises Domain Name System (DNS) server, [configure your DNS server](../storage/common/storage-private-endpoints.md#dns-changes-for-private-endpoints) to resolve to the new private endpoints.
7070

71-
* [Restrict traffic to specific subnets](../storage/common/storage-network-security.md#grant-access-from-a-virtual-network). Ensure your function app is network integrated with an allowed subnet and that the subnet has a service endpoint to `Microsoft.Storage`. If your app is in a different region than your virtual network, use `Microsoft.Storage.Global` instead. Note, a storage account cannot have both.
71+
* [Restrict traffic to specific subnets](../storage/common/storage-network-security.md#grant-access-from-a-virtual-network). Ensure your function app is network integrated with an allowed subnet and that the subnet has only one of these service endpoints defined:
72+
* `Microsoft.Storage`: use when your app is in the same region as your virtual network.
73+
* `Microsoft.Storage.Global`: use when your app is in a different region than your virtual network.
7274

7375
1. Copy the file and blob content from the current storage account used by the function app to the newly secured storage account and file share. [AzCopy](../storage/common/storage-use-azcopy-blobs-copy.md) and [Azure Storage Explorer](https://techcommunity.microsoft.com/t5/azure-developer-community-blog/azure-tips-and-tricks-how-to-move-azure-storage-blobs-between/ba-p/3545304) are common methods. If you use Azure Storage Explorer, you might need to allow your client IP address access to your storage account's firewall.
7476

@@ -88,7 +90,7 @@ You're now ready to route your function app's traffic to go through the virtual
8890

8991
1. In the new page, under **Application routing**, select **Outbound internet traffic**.
9092

91-
1. If you're using an Azure Files connection, enable [content share routing](../app-service/overview-vnet-integration.md#content-share) to enable your function app to communicate with Azure Files through its virtual network. In the same page as the previous step, under **Configuration routing**, select **Content storage**.
93+
1. If your app uses an Azure Files share, enable [content share routing](../app-service/overview-vnet-integration.md#content-share) by selecting **Content storage** under **Configuration routing**. This allows your app to communicate with Azure Files using the virtual network.
9294

9395
[!INCLUDE [functions-content-over-vnet-shared-storage-note](../../includes/functions-content-over-vnet-shared-storage-note.md)]
9496

@@ -105,7 +107,7 @@ Finally, you need to update your application settings to point to the new secure
105107
| [`WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`](./functions-app-settings.md#website_contentazurefileconnectionstring) | Storage connection string | Use the connection string for your new secured storage account, which you saved earlier. Only relevant if your app is using Azure Files. |
106108
| [`WEBSITE_CONTENTSHARE`](./functions-app-settings.md#website_contentshare) | File share | Use the name of the file share created in the secured storage account where the project deployment files reside. Only relevant if your app is using Azure Files. |
107109

108-
1. Select **Apply**, and then **Confirm** to save the new application settings in the function app. This will cause the function app to restart.
110+
1. Select **Apply**, and then **Confirm** to save the new application settings in the function app. This causes the function app to restart.
109111

110112
After the function app finishes restarting, it connects to the secured storage account.
111113

articles/azure-functions/storage-considerations.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -166,7 +166,7 @@ Creating your function app resources using methods other than the Azure CLI requ
166166

167167
## Create an app without Azure Files
168168

169-
The Azure Files service provides a shared file system that supports high-scale scenarios. When your function app runs in an Elastic Premium or Windows Consumption plan, an Azure Files share is created by default in your storage account. That share is used by Functions to enable certain features, like log streaming. It is also used as a shared package deployment location, which guarantees the consistency of your deployed function code across all instances.
169+
The Azure Files service provides a shared file system that supports high-scale scenarios. When your function app runs in an Elastic Premium plan or on Windows in a Consumption plan, an Azure Files share is created by default in your storage account. That share is used by Functions to enable certain features, like log streaming. It is also used as a shared package deployment location, which guarantees the consistency of your deployed function code across all instances.
170170

171171
By default, function apps hosted in Premium and Consumption plans use [zip deployment](./deployment-zip-push.md), with deployment packages stored in this Azure file share. This section is only relevant to these hosting plans.
172172

@@ -185,13 +185,13 @@ You should also note the following considerations:
185185

186186
* The app can't use version 1.x of the Functions runtime.
187187
* Your app can't rely on a shared writeable file system.
188-
* Portal editing will not work.
188+
* Portal editing isn't supported
189189
* Log streaming experiences in clients such as the Azure portal default to file system logs. You should instead rely on Application Insights logs.
190190

191-
If the above requirements suit your scenario, you can proceed to create a function app without Azure Files. You can do this by creating an app without the `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE` app settings.
191+
If the above requirements suit your scenario, you can proceed to create a function app without Azure Files. You can do this by creating an app without the `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING` and `WEBSITE_CONTENTSHARE` app settings in one of these ways:
192192

193-
- If you are creating function apps via ARM templates: remove the two app settings and then deploy the modified template.
194-
- If you are creating function apps in the Azure portal: unselect the "Add an Azure Files connection" checkbox in the Storage tab.
193+
- Bicep/ARM templates: remove the two app settings from the ARM template or Bicep file and then deploy the app using the modified template.
194+
- Azure portal: unselect the **Add an Azure Files connection** checkbox in the **Storage** tab when you create the app in the portal.
195195

196196
Since Azure Files is used to enable dynamic scale-out for Functions, scaling could be limited when running your app without Azure Files in the Elastic Premium plan and Consumption plans running on Windows.
197197

0 commit comments

Comments
 (0)