Under active development Content is continuously updated and improved

Azure Functions

by Microsoft Corporation

Serverless compute platform for event-driven functions built on Azure App Service

Official Docs

Under Construction: This guidance is being actively developed and verified. Content may change.

Authoritative Sources

Key guidance documents from authoritative organizations. Click to view the original source.

Microsoft guidance on securing Azure Functions through App Service hardening, HTTPS enforcement, access keys, authentication, and network isolation. Includes recommendations for logging, monitoring, and layered protection for HTTP endpoints.

Verification Commands

Commands and queries for testing and verifying security configurations.

List Function Apps CLI
az functionapp list --query "[].{name:name,resourceGroup:resourceGroup,location:location}" -o table
Show Function App configuration (HTTPS, TLS, identity) CLI
az functionapp show --name FUNCTION_APP --resource-group RG --output json
List Function App settings CLI
az functionapp config appsettings list --name FUNCTION_APP --resource-group RG
Check managed identity configuration CLI
az functionapp identity show --name FUNCTION_APP --resource-group RG

Related Controls

Security controls from various frameworks that relate to Azure Functions.

Related Technologies