Azure Functions Virtual Network Integration | Private Endpoints for Azure Functions

Azure Function VNET integration is supported by Premium Azure functions, App Service Plan minimum Basic tier and of course App Service Environment. When we create an azure function without any VNET integration, it will have a public IP address and it will be exposed to the internet.

This Video will explain
1. How we can secure the Azure function with VNET integration?
2. How we can create a private endpoint to secure incoming traffic?
3. How can we restrict outbound traffic from the Azure function to VNET?

I will demonstrate this using App Service Plan Basic tier azure function with step by step process through the Azure portal.

[edemfromeden]

Hi Sri, thanks for the quality content. I have a question. What if my security policy require Storage Accounts to be private endpoint enabled ? During the Function App creation I’m asked to either select an existing Storage Account or let Azure create it for me. How would that work ?

[brettlindsley]

Excellent video! It clarified a lot of the high-level concepts very quickly with a good relevant example.

[amaykulkarni]

Hi Sri,
We have same Azure function private endpoint configuration as you have specified, how to call the azure function publicly like from Slack bot?
Is there any other way to secure Azure functions?

[marsamuk]

Hi. In your setup, Is it possible to run a function to execute on the VM via private endpoint?

[vipuldabhi]

how to establish connection to key vault using private endpoint?if you could please create a video for that,
also how we can implement function app premium, Storage and Azure key vault together using an ARM Template

[cloudykube]

Hey Sri, this is a great content and to the point. Can you suggest how we can connect to on-prem resources from azure function in this case ?

[rifatp]

in vnet integration delegated subnet is used for the Azure function app, but the storage account has private endpoint enabled & in that storage account networking needs to provide function app vnet & delegated subnet for whitelisting the function in storage account..but that will give error? can not use same subnet for the storage account private endpoint

[fruddinator]

Nice one Sri! With the vnet integration for the azure function app I wasn't sure what subnet to use? Eg do I create a azurefunctionoutboundsubnet? You just used "default" so I guess that's ok?

[desafioaceito]

What if you enable private endpoint before deploying the function code? It will become private, so i guess you will have to use a VPN to be able to deploy it, right?

[ggs]

Can you please advise :) we want to use Consumption Plan because Premium is so expensive but it does not have VNET integration as you said, is there any other way to connect a Consumption Plan to a private VNET?

[ravicku]

Good video but you missed one of the important topic of inbound subnet and out bound subnet