Securing Serverless Applications in Azure
summary
Shows how a serverless app authenticates users and calls other services end to end using concrete components and code. Demonstrates Azure Functions bound to ClaimsPrincipal for user info, a Logic App queue trigger that calls Microsoft Graph to create external B2B users, and secrets stored in Key Vault accessed via Managed Identity so no credentials are hard coded. Also configures App registrations, delegates Graph permissions, and wires up Application Insights for monitoring and secure outputs.
AI-written summary · about
chapters (28)
- 0:00Securing serverless in Azure
- 1:39What is serverless
- 3:04Azure serverless services
- 5:12Serverless benefits and costs
- 6:38Auth challenges
- 8:08Credential management
- 9:34Securing Functions and Logic Apps
- 12:03Demo setup and portal walkthrough
- 13:28Creating a serverless function
- 15:42Auth in functions
- 17:09Azure AD authentication
- 19:55Testing secure function
- 22:02Function security recap
- 23:03Managed identities
- 25:58Secrets and Key Vault
- 26:39Managed identities in Logic Apps
- 28:47Logic Apps identities setup
- 30:39External users with Graph API
- 33:29Permissions and app registration
- 36:10Retrieving Key Vault secrets
- 38:21Secure Logic Apps outputs
- 39:25Sending emails with Graph API
- 40:31Testing secure workflow
- 42:02Monitoring with Application Insights
- 44:11Application Insights features
- 46:00Application Insights setup
- 48:10Performance and logs
- 49:15Final recap
related talks
47mSecuring Serverless Applications in Azure
01h 00mSecuring Serverless Applications in Azure
01h 03mServerless and App Service Security on Azure
40mBuilding, aggregating and protecting serverless APIs on Azure
01h 01mAzure Network Security
50mSecuring .NET Apps and Microservices in Azure
54mUnderstanding the Serverless platform in Microsoft Azure
01h 05mBuilding Secure Microservices in Azure