Custom allocation policy with Azure Functions for DPS

VikasRajareddy-9365 26

Currently we are using custom allocation policy using Azure Function to provision devices suing DPS. But if the Azure Function is in private endpoint we are unable to invoke the unction for custom allocation.

So, how to do the device provisioning using custom policy for the below scenarios.

Scenario 1: Azure Function: Private endpoint DPS : Public endpoint

Scenario 2: Azure Function: Private endpoint DPS : Private endpoint

is there any configuration (networking or any other )that must be updated on Azure function so that DPS could call the function in private endpoint?

LeelaRajeshSayana-MSFT 13,456 Reputation points

2023-01-10T22:50:36.47+00:00

Hi @VikasRajareddy-9365 , thank you for posting this question. I am checking to see if you have looked into the tutorial Integrate Azure Functions with an Azure virtual network by using private endpoints. The use case mentioned in the Tutorial is different than what you are looking for. However, it provides steps needed to Integrate function App. Please go through the resource and let us know if this addresses the questions you have.
VikasRajareddy-9365 26 Reputation points

2023-01-16T05:30:47.0933333+00:00

@LeelaRajeshSayana-MSFT the mentioned like doesn't address my question.

I wanted to understand if a DPS in public could still call a Azure Function which is in private endpoint?

Should there be any private endpoint or any managed identity that should be created for DPS(still having the public access) so that it could call the Function app.
MughundhanRaveendran-MSFT 12,411 Reputation points

2023-01-17T06:39:13.92+00:00

@VikasRajareddy-9365 , Please provide inputs to the below queries so that I can provide a proper answer

What trigger does the the function app use?

What is the plan/SKU of function app?

How are you calling the Function app?
VikasRajareddy-9365 26 Reputation points

2023-01-18T05:29:01.3233333+00:00

@MughundhanRaveendran-MSFT below are the details

What trigger does the the function app use? HTTP trigger

What is the plan/SKU of function app? App service plan

How are you calling the Function app? its called from the DPS custom allocation policy section
MughundhanRaveendran-MSFT 12,411 Reputation points

2023-01-20T06:31:01.9733333+00:00

@VikasRajareddy-9365 , Thanks for the details. The DPS and the Function app should be in the same vnet (can be in a different subnet inside the same vnet) , not just the private endpoint but the function app should also be integrated with regional vnet.
MughundhanRaveendran-MSFT 12,411 Reputation points

2023-02-02T04:57:38.14+00:00

@VikasRajareddy-9365 , Did you get a chance to look into my previous comment?