You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-functions/function-keys-how-to.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Work with access keys in Azure Functions
3
3
description: Learn about access keys in Azure Functions, including how to get and renew keys and how to use access keys when calling function endpoints.
4
4
ms.service: azure-functions
5
5
ms.topic: how-to
6
-
ms.date: 07/07/2024
6
+
ms.date: 07/18/2024
7
7
8
8
#CustomerIntent: As an Azure Functions developer, I want learn how to work with access keys so that I can properly harden both my function endpoints and my overall function app running in Azure.
9
9
---
@@ -41,14 +41,14 @@ The following table compares the uses for various kinds of access keys:
41
41
| Execute a function | Specific function | Function |
42
42
| Execute a function | Any function | Function or host |
43
43
| Call an `admin` endpoint | Function app | Master-only |
| Call an extension-specific Webhook (internal) | Function app<sup>*</sup> | system<sup>2</sup>|
44
+
| Call Durable Task extension APIs | Function app<sup>*</sup> | System |
45
+
| Call an extension-specific Webhook (internal) | Function app<sup>*</sup> | system |
46
46
47
47
<sup>*</sup>Scope determined by the extension.
48
48
49
49
## Key requirements
50
50
51
-
In Functions, access keys are randomly-generated 32-byte arrays that are encoded as URL-safe base-64 strings. While you can generate your own access keys and use them with Functions, we strongly recommend that you instead allow Functions to generate all of your access keys for you.
51
+
In Functions, access keys are randomlygenerated 32-byte arrays that are encoded as URL-safe base-64 strings. While you can generate your own access keys and use them with Functions, we strongly recommend that you instead allow Functions to generate all of your access keys for you.
52
52
53
53
Functions-generated access keys include special signature and checksum values that indicate the type of access key and that it was generated by Azure Functions. Having these extra components in the key itself makes it much easier to determine the source of these kinds of secrets located during security scanning and other automated processes.
Instead of a connection string, you can use an identitybased connection for this storage account. For more information, see [Connecting to host storage with an identity](functions-reference.md#connecting-to-host-storage-with-an-identity).
286
+
Instead of a connection string, you can use an identity-based connection for this storage account. For more information, see [Connecting to host storage with an identity](functions-reference.md#connecting-to-host-storage-with-an-identity).
287
287
288
288
## AzureWebJobsStorage__accountName
289
289
@@ -408,7 +408,8 @@ This app setting is a temporary way for Node.js apps to enable a breaking change
408
408
409
409
Starting with Node.js v20, the app setting has no effect and the breaking change behavior is always enabled.
410
410
411
-
For Node.js v18 or lower, the app setting can be used and the default behavior depends on if the error happens before or after a model v4 function has been registered:
411
+
For Node.js v18 or lower, the app setting is used, and the default behavior depends on if the error happens before or after a model v4 function has been registered:
412
+
412
413
- If the error is thrown before (for example if you're using model v3 or your entry point file doesn't exist), the default behavior matches `false`.
413
414
- If the error is thrown after (for example if you try to register duplicate model v4 functions), the default behavior matches `true`.
414
415
@@ -553,7 +554,7 @@ The configuration is specific to Python function apps. It defines the prioritiza
553
554
|PYTHON\_ISOLATE\_WORKER\_DEPENDENCIES|`1`| Prioritize loading the Python libraries from application's package defined in requirements.txt. This prevents your libraries from colliding with internal Python worker's libraries. |
554
555
555
556
## PYTHON_ENABLE_DEBUG_LOGGING
556
-
Enables debug-level logging in a Python function app. A value of `1` enables debug-level logging. Without this setting or with a value of `0`, only information and higherlevel logs are sent from the Python worker to the Functions host. Use this setting when debugging or tracing your Python function executions.
557
+
Enables debug-level logging in a Python function app. A value of `1` enables debug-level logging. Without this setting or with a value of `0`, only information and higher-level logs are sent from the Python worker to the Functions host. Use this setting when debugging or tracing your Python function executions.
557
558
558
559
When debugging Python functions, make sure to also set a debug or trace [logging level](functions-host-json.md#logging) in the host.json file, as needed. To learn more, see [How to configure monitoring for Azure Functions](configure-monitoring.md).
559
560
@@ -793,7 +794,7 @@ Some configurations must be maintained at the App Service level as site settings
793
794
794
795
### alwaysOn
795
796
796
-
On a function app running in a [Dedicated (App Service) plan](./dedicated-plan.md), the functions runtime goes idle after a few minutes of inactivity, a which point only requests to an HTTP triggers_wakes-up_ your functions. To make sure that your non-HTTP triggered functions run correctly, including Timer trigger, enable Always On for the function app by setting the `alwaysOn` site setting to a value of `true`.
797
+
On a function app running in a [Dedicated (App Service) plan](./dedicated-plan.md), the functions runtime goes idle after a few minutes of inactivity, at which point only a request to an HTTP trigger_wakesup_ your function. To make sure that your non-HTTP triggered functions run correctly, including Timer trigger, enable Always On for the function app by setting the `alwaysOn` site setting to a value of `true`.
797
798
798
799
### linuxFxVersion
799
800
@@ -884,7 +885,7 @@ In the [Flex Consumption plan](./flex-consumption-plan.md), these site propertie
884
885
|`properties.use32BitWorkerProcess`|32-bit not supported |
885
886
|`properties.vnetBackupRestoreEnabled`|Not used for networking in Flex Consumption|
886
887
|`properties.vnetContentShareEnabled`|Not used for networking in Flex Consumption|
887
-
|`properties.vnetImagePullEnabled`|Not used for networking in Flex Consumptionlid|
888
+
|`properties.vnetImagePullEnabled`|Not used for networking in Flex Consumption|
888
889
|`properties.vnetRouteAllEnabled`|Not used for networking in Flex Consumption|
Copy file name to clipboardExpand all lines: articles/azure-functions/functions-bindings-http-webhook-trigger.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -654,9 +654,9 @@ The trigger input type is declared as one of the following types:
654
654
|-|-|
655
655
|[HttpRequest]|_Use of this type requires that the app is configured with [ASP.NET Core integration in .NET Isolated]._<br/>This gives you full access to the request object and overall HttpContext. |
656
656
|[HttpRequestData]| A projection of the request object. |
657
-
| A custom type | When the body of the request is JSON, the runtime will try to parse it to set the object properties. |
657
+
| A custom type | When the body of the request is JSON, the runtime tries to parse it to set the object properties. |
658
658
659
-
When the trigger parameter is an `HttpRequestData` an `HttpRequest`, custom types can also be bound to other parameters using `Microsoft.Azure.Functions.Worker.Http.FromBodyAttribute`. Use of this attribute requires [`Microsoft.Azure.Functions.Worker.Extensions.Http` version 3.1.0 or later](https://www.nuget.org/packages/Microsoft.Azure.Functions.Worker.Extensions.Http). This is a different type than the similar attribute in `Microsoft.AspNetCore.Mvc`, and when using ASP.NET Core integration, you'll need a fullyqualified reference or `using` statement. The following example shows how to use the attribute to get just the body contents while still having access to the full `HttpRequest`, using the ASP.NET Core integration:
659
+
When the trigger parameter is of type `HttpRequestData`or `HttpRequest`, custom types can also be bound to other parameters using `Microsoft.Azure.Functions.Worker.Http.FromBodyAttribute`. Use of this attribute requires [`Microsoft.Azure.Functions.Worker.Extensions.Http` version 3.1.0 or later](https://www.nuget.org/packages/Microsoft.Azure.Functions.Worker.Extensions.Http). This is a different type than the similar attribute in `Microsoft.AspNetCore.Mvc`. When using ASP.NET Core integration, you need a fully-qualified reference or `using` statement. This example shows how to use the attribute to get just the body contents while still having access to the full `HttpRequest`, using ASP.NET Core integration:
|**`--access-token`**| Lets you use a specific access token when performing authenticated azure actions. |
229
+
|**`--access-token`**| Lets you use a specific access token when performing authenticated `azure` actions. |
230
230
|**`--access-token-stdin `**| Reads a specific access token from a standard input. Use this when reading the token directly from a previous command such as [`az account get-access-token`](/cli/azure/account#az-account-get-access-token). |
231
231
|**`--additional-packages`**| List of packages to install when building native dependencies. For example: `python3-dev libevent-dev`. |
232
232
|**`--build`**, **`-b`**| Performs build action when deploying to a Linux function app. Accepts: `remote` and `local`. |
@@ -278,7 +278,7 @@ The following deployment options apply:
|**`--access-token`**| Lets you use a specific access token when performing authenticated azure actions. |
281
+
|**`--access-token`**| Lets you use a specific access token when performing authenticated `azure` actions. |
282
282
|**`--access-token-stdin `**| Reads a specific access token from a standard input. Use this when reading the token directly from a previous command such as [`az account get-access-token`](/cli/azure/account#az-account-get-access-token). |
283
283
|**`--environment`**| The name of an existing Container Apps environment.|
284
284
|**`--image-build`**| When set to `true`, skips the local Docker build. |
Copy file name to clipboardExpand all lines: articles/azure-functions/functions-deployment-technologies.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -56,7 +56,7 @@ Some key concepts are critical to understanding how deployments work in Azure Fu
56
56
57
57
When you change any of your triggers, the Functions infrastructure must be aware of the changes. Synchronization happens automatically for many deployment technologies. However, in some cases, you must manually sync your triggers.
58
58
59
-
You must manually sync triggers when using these deploymention options:
59
+
You must manually sync triggers when using these deployment options:
Copy file name to clipboardExpand all lines: articles/azure-functions/functions-infrastructure-as-code.md
+6-9Lines changed: 6 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -54,8 +54,8 @@ You must create or configure these resources for an Azure Functions-hosted deplo
54
54
| Resource | Requirement | Syntax and properties reference |
55
55
|------|-------|----|
56
56
| A [storage account](#create-storage-account)| Required |[Microsoft.Storage/storageAccounts](/azure/templates/microsoft.storage/storageaccounts)|
57
-
| An [Application Insights](#create-application-insights) component | Recommended |[Microsoft.Insights/components](/azure/templates/microsoft.insights/components)<sup>1</sup>|
58
-
| A [hosting plan](#create-the-hosting-plan)| Required<sup>2</sup>|[Microsoft.Web/serverfarms](/azure/templates/microsoft.web/serverfarms)|
57
+
| An [Application Insights](#create-application-insights) component | Recommended |[Microsoft.Insights/components](/azure/templates/microsoft.insights/components)<sup>*1*</sup>|
58
+
| A [hosting plan](#create-the-hosting-plan)| Required |[Microsoft.Web/serverfarms](/azure/templates/microsoft.web/serverfarms)|
59
59
| A [function app](#create-the-function-app)| Required |[Microsoft.Web/sites](/azure/templates/microsoft.web/sites)|
60
60
:::zone-end
61
61
:::zone pivot="consumption-plan"
@@ -64,7 +64,7 @@ You must create or configure these resources for an Azure Functions-hosted deplo
64
64
| Resource | Requirement | Syntax and properties reference |
65
65
|------|-------|----|
66
66
| A [storage account](#create-storage-account)| Required |[Microsoft.Storage/storageAccounts](/azure/templates/microsoft.storage/storageaccounts)|
67
-
| An [Application Insights](#create-application-insights) component | Recommended |[Microsoft.Insights/components](/azure/templates/microsoft.insights/components)<sup>1</sup>|
67
+
| An [Application Insights](#create-application-insights) component | Recommended |[Microsoft.Insights/components](/azure/templates/microsoft.insights/components)<sup>*</sup>|
68
68
| A [function app](#create-the-function-app)| Required |[Microsoft.Web/sites](/azure/templates/microsoft.web/sites)|
69
69
:::zone-end
70
70
:::zone pivot="container-apps"
@@ -73,7 +73,7 @@ An Azure Container Apps-hosted deployment typically consists of these resources:
73
73
| Resource | Requirement | Syntax and properties reference |
74
74
|------|-------|----|
75
75
| A [storage account](#create-storage-account)| Required |[Microsoft.Storage/storageAccounts](/azure/templates/microsoft.storage/storageaccounts)|
76
-
| An [Application Insights](#create-application-insights) component | Recommended |[Microsoft.Insights/components](/azure/templates/microsoft.insights/components)<sup>1</sup>|
76
+
| An [Application Insights](#create-application-insights) component | Recommended |[Microsoft.Insights/components](/azure/templates/microsoft.insights/components)<sup>*</sup>|
77
77
| A [managed environment](./functions-container-apps-hosting.md#)| Required |[Microsoft.App/managedEnvironments](/azure/templates/microsoft.app/managedenvironments)|
78
78
| A [function app](#create-the-function-app)| Required |[Microsoft.Web/sites](/azure/templates/microsoft.web/sites)|
79
79
:::zone-end
@@ -87,10 +87,7 @@ An Azure Arc-hosted deployment typically consists of these resources:
87
87
| An [App Service Kubernetes environment](../app-service/overview-arc-integration.md#app-service-kubernetes-environment)| Required |[Microsoft.ExtendedLocation/customLocations](/azure/templates/microsoft.extendedlocation/customlocations)|
88
88
| A [function app](#create-the-function-app)| Required |[Microsoft.Web/sites](/azure/templates/microsoft.web/sites)|
1. If you don't already have a Log Analytics Workspace that can be used by your Application Insights instance, you also need to create this resource.
92
-
2. An explicit hosting plan isn't required when you choose to host your function app in a [Consumption plan](./consumption-plan.md).
93
-
:::zone-end
90
+
<sup>*</sup>If you don't already have a Log Analytics Workspace that can be used by your Application Insights instance, you also need to create this resource.
94
91
95
92
When you deploy multiple resources in a single Bicep file or ARM template, the order in which resources are created is important. This requirement is a result of dependencies between resources. For such dependencies, make sure to use the `dependsOn` element to define the dependency in the dependent resource. For more information, see either [Define the order for deploying resources in ARM templates](../azure-resource-manager/templates/resource-dependency.md) or [Resource dependencies in Bicep](../azure-resource-manager/bicep/resource-dependencies.md).
96
93
@@ -325,7 +322,7 @@ This example section creates Flex Consumption plan:
325
322
326
323
For more context, see the complete [function.bicep](https://github.com/Azure-Samples/azure-functions-flex-consumption-samples/blob/main/IaC/bicep/core/host/function.bicep#L21) file in the Flex Consumption plan sample repository.
Copy file name to clipboardExpand all lines: articles/azure-functions/functions-run-local.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -497,7 +497,7 @@ When the settings file is encrypted and decrypted, the file's `IsEncrypted` sett
497
497
[Functions triggers and bindings](functions-triggers-bindings.md) are implemented as .NET extension (NuGet) packages. To be able to use a specific binding extension, that extension must be installed in the project.
498
498
499
499
::: zone pivot="programming-language-javascript,programming-language-csharp"
500
-
This section doesn't apply to version 1.x of the Functions runtime. In version 1.x, supported binding were included in the core product extension.
500
+
This section doesn't apply to version 1.x of the Functions runtime. In version 1.x, supported bindings were included in the core product extension.
0 commit comments