Azure monitor workbook custom endpoint query to function app behind private endpoint

Martin Macko 15 Reputation points
2023-05-13T17:17:18.5166667+00:00

Hi guys,

In Azure Monitor workbooks I want to create my own workbook where the query would call azure function app. This is possible by choosing custom endpoint option while creating new query. Everything works as expected when using azure function with public endpoint.

But, when I use Azure function with private endpoint it doesn't work. CORS is not a problem, I even tried * in function's CORS for testing purposes.

I tried to use also Azure Monitor Private Link Scopes but without success.

So, I guess it is not possible to call Azure function behind private endpoint from workbooks ?

User's image

Thanks for any help.

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,986 questions
Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
4,605 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Konstantinos Passadis 17,456 Reputation points MVP
    2023-05-14T14:45:12.8+00:00

    Hello @MartinMacko-9882!

    Well i am really disappointed . because i can verify that it is not supported - working

    Did all the steps , and the final one was to go on the function App and disable Public Access from Access Restrictions , on the Networking Tab

    If for any reason the DNS was resoving correctly without the need to add privatelink into the URL, then when asking the Original URL of the Function via the Query it should have worked. Once Public Access was shutdown it stopped

    I hope this helps!

    Kindly mark the answer as Accepted and Upvote in case it helped!

    Regards

    User's image


  2. AnuragSingh-MSFT 21,241 Reputation points
    2023-05-15T05:29:12.1133333+00:00

    Thank you MartinMacko-9882 and @Konstantinos Passadis for taking time to share your findings here with the community. I apologize for the inconvinience.

    I would like to add the following to this discussion. As discussed above, the workbook does not have the capability now to connect to private link (or call resources with only Private Link access), which also means that for LA/AI workspace which have blocked query access from public network, the data cannot be queries from Azure Monitor workbook. For more details, please see Control network access to your resources

    I would request posting this feedback as an idea here - Azure monitor feedback so that it can be considered by the team in future.