Secure Azure Http Triggered Function

Secure Azure Http Triggered Function

Ensures that the authorization level function is set on Azure HTTP trigger functions.

Authorization levels for HTTP-triggered functions helps establish a secure access control framework during development and provides flexibility to enhance security in production by considering alternative measures beyond basic API access keys.

Recommended Actions

Set the authorization level for all HTTP-triggered functions.

Links

• https://learn.microsoft.com/en-us/azure/azure-functions/security-concepts?tabs=v4#authorization-scopes-function-level