Securing Serverless Applications in Azure

on YouTube ↗01h 00m

" summary

Step-by-step demo shows an Azure Functions app wired to a Storage Queue, retrieving secrets from Azure Key Vault, using Managed Identity to avoid embedded credentials, and calling the Microsoft Graph invitation API to create external users via an app registration and client secret. ClaimsPrincipal binding surfaces caller email and claims into the function, secure outputs hide secret values from logs, and Application Insights + Azure Monitor capture live invocation metrics and alerts — the end-to-end flow runs and is monitored.

AI-written summary · about

" chapters (17)

1. 0:00Securing serverless in Azure
2. 1:53Why serverless needs security
3. 5:06Cost and ops benefits
4. 10:11Secure Azure Functions from scratch
5. 13:27Demo: secure message queue function
6. 21:55Auth and authorization in Functions
7. 23:55Managed identities for Functions
8. 27:53Demo: managed identity access
9. 32:54Register apps in Azure AD
10. 36:27Permissions for external users
11. 40:40Managed identity with Key Vault
12. 42:10Securing Logic Apps outputs
13. 46:43Monitoring with Application Insights
14. 51:05Application Insights dashboards
15. 54:49Alerts for security monitoring
16. 56:57Security standards for serverless
17. 59:17Q&A

" related talks

• 50mSecuring Serverless Applications in AzureSjoukje Zaal · NDC Sydney 2020
• 47mSecuring Serverless Applications in AzureSjoukje Zaal · Build Stuff 2020
• 01h 03mServerless and App Service Security on AzureMahesh Krishnan, Pratik Khasnabis · NDC Sydney 2019
• 50mSecuring .NET Apps and Microservices in AzureVictoria Almazova · .NET fwdays'20 online conference
• 42mService Principals and Managed IdentitiesChristos Matskas, John Patrick · Build Stuff 2020
• 01h 01mServerless Architecture With AzureWong Kah Wai · Global Azure Virtual 2020
• 01h 01mServerless Azure Data handlingBenjamin Kettner, Frank Geisler · Global Azure 2021
• 01h 05mBuilding Secure Microservices in AzureJimmy Bogard · NDC London 2023