Which Azure Function App Keys for Azure Static Web Site & Azure API Management?

Question

When I create an Azure Function App, I have some options for keys.
I can choose admin, function, default or anonymous.

In version 1 I plan to publish an Azure Static Web Site that calls my Function App via Angular AJAX and Azure API management with no authentication.

1. Which key should I use? I am thinking I would use the function key. Will the function key be securely concealed by the Azure API management?
2. Does the choice of keys change if I add single sign-on (SSO) authentication ... perhaps via Azure Active Directory B2C or the EasyAuth feature in Azure Static Web Apps?

Thanks

Siegfried

Answer 1

Hello @Siegfried Heintze

Thank you for your post on this community space.

As per your case scenario description, I would like to add some additional details in order to have a better understanding. So, see them down below:

https://learn.microsoft.com/en-us/azure/key-vault/general/authentication?source=recommendations

For more information, see the Managed identity overview. Also see Azure services that support managed identity, which links to articles that describe how to enable managed identity for specific services (such as App Service, Azure Functions, Virtual Machines, etc.).

Having said that, the following info can be useful as well...

Furthermore, the next article gives more insights about it https://aztoso.com/functions/keys/

Looking forward to your feedback,

Cheers,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.