azure function consumption
default, scales automatically
azure function premium
pre-warmed instances
azure function dedicated
always on option
function chaining
execute in specific order
fan out/in
multiple functions in parallel
azure function async http api
polls if function has completed
azure function monitor
reoccurring function activated by a regular timer
azure function human interaction
approval process
azure function aggregator
aggreates data from multiple sources
user delegation shared access signature
- Secured with azure AD credentials
- blob storage only
- most secure
service shared access signature
- secured with storage account key
- delegates access to 1 azure storage service (blob, queue, table)
account shared access signature
- secured with storage account key
- delegates access to 1+ storage service
SAS sp=r
- access rights
- 'r' for read
, SAS st=2020-1-20T11
date and time access starts
SAS se=2020-1-20T11
data and time access ends
SAS sv=2019-02-02
version of storage API
SAS sr=b
- kind of storage being accessed
- 'b' for blob
SAS sig=asdfjlsdkfjl
cryptographic signature
.Net create SAS Token for Blob container
builder = new BlobSasBuilder() {
resource = "c"
}
//set permissions
builder.SetPermissions(BlobContainerSasPermissions.Read)
uri for read only blob
https://{storageAccountName}.blob.core.windows.net/{containerName}/{blobName}
.net blob access policy
identifier = new BlobSignedIdentifier()
{
Id = {stored access policy Id}
AccessPolicy = new BlobAccessPolicy
{
ExpiresOn = {date}
Permissions = "rw"
}
}
blobContainer.SetAccessPolicy(permissions: new BlobSignedIdentifier[] { identifier})
CLI storage container access policy
az storage container policy create
--name
--container-name
--start
--expiry
--permissions
--account-key