Pros: 1. Can offset token validation to APIM 2. Functions are private now Cons: 1. New cloud resource (may be costly)