Securing Serverless Applications in Azure
summary
Shows a working pattern to secure serverless endpoints by combining Azure Functions with Key Vault and a managed identity so credentials never appear in code. Walks through app registration, granting Graph permissions, generating an app secret, and using a Logic App/function flow to create a guest user in Azure AD — demo creates a real external user and the flow succeeds. Focus is on concrete steps, portal clicks, connector limits, and what to lock down next.
AI-written summary · about
chapters (14)
- 0:00Introduction to serverless
- 1:51Why serverless is secure
- 4:18Scenario for external users
- 7:11Security mechanisms overview
- 8:37Authentication and permissions
- 12:12Demo: Azure Functions setup
- 19:43Demo: Testing the function
- 22:40Identity and claims handling
- 27:05Demo: Managed identities
- 30:13Demo: Logic Apps integration
- 33:24Permissions and registration
- 38:25Demo: App registration secrets
- 41:15Demo: Inviting external users
- 43:51Wrap-up and Q&A
related talks
50mSecuring Serverless Applications in Azure
01h 00mSecuring Serverless Applications in Azure
01h 03mServerless and App Service Security on Azure
50mSecuring .NET Apps and Microservices in Azure
01h 05mBuilding Secure Microservices in Azure
01h 06mPractical Auth in a Serverless World
01h 01mAzure Network Security
43mSecure Development