blob 触发器 azure function 调用 rest Z8A5DA52ED126447D359E70C057

Question

Hi I'm having this scenario:

User Upload a file to a blob storage account -> Azure function picks it up -> Call a rest api to perform some actions with the date inside the excel.

The azure function has a system assigned identity and both, the rest api and the function, resides inside the same resource group. The rest api is built using Azure app services. I'm not sure on how to authenticate the Function app to call the REST api, is there any example on how should I proceed with authentication between Function App and REST api using Azure AD or system managed identity?

Is there another way of achieving this scenario that I'm not seeing?

Answer 1

As you are using the App Service, You can refer this link to know how to secure your web app with the App Service authentication/authorization module and Azure Active Directory (Azure AD).

You can proceed with the authentication between the Function App and the Rest API by using Azure Active Directory as authentication provider. You have the option of creating a new app registration automatically or using an already registered registration. This link shows how to set up Azure App Service or Azure Functions authentication so that your app uses the Microsoft identity platform as the authentication provider.