Azure function storage requirement types (Blob, Queue, and Table) clarification

Question

The documentation specifies the following requirement regarding azure functions: You must create or link to a general-purpose Azure Storage account that supports Blob, Queue, and Table storage.

We have set up a VNET where this matters for deciding for which storage types (blob, files, table) we create private endpoints. What Storage type does a basic Azure Function need, in order to fully function? The way the docs are written leads me te believe that the Azure Function will use all 3 storage types to work properly, which means we'd have to set up 3 private endpoints in accordance to these docs: https://learn.microsoft.com/en-us/azure/azure-functions/functions-create-vnet#lock-down-your-storage-account.

Answer 1

Hi,

Functions need Blob, Queue, Table, and Files. If you want to be more technical, precisely what is needed will depend on what is being used/done with each function and how you have things configured. You can even have each function use different storage accounts if needed/desired by configuring the Application settings.

If you are interested, for learning purposes, I recommend creating a function app running in consumption plan in the portal, then create several functions and set them up with different triggers, for example. The code editor in the portal is fine for this purpose. Don't really need to write any of your own code if you don't want to.

Once you have the various functions created, open up the storage account and browse through to see some of things created. Also the beginning of the article you linked has overview of what each storage type is used for. Below is short walkthrough of blob trigger function (there are others on left of article), again if you are interested:

https://learn.microsoft.com/en-us/azure/azure-functions/functions-create-storage-blob-triggered-function

If the above was useful to you, please click Accept Answer.

Thanks.

-TP

Answer 2

Hello @Levi - I can confirm that you'll need to create private endpoints for all 4 types: Blob, Files, Queue, and Table. Here's the working sample (Bicep/ARM) of the tutorial: https://learn.microsoft.com/en-us/samples/azure/azure-quickstart-templates/function-app-storage-private-endpoints/

You can also opt to convert an existing storage account to a VNET-secured one, instead of creating a new one like in the tutorial: https://learn.microsoft.com/en-us/answers/questions/606652/do-azure-function-private-endpoints-require-creati

I hope this is helpful, let me know if you have any further questions.