Authentication required while calling Azure PowerShell based functions and will this traffic flow over ExpressRoute or internet ?

Question

Azure is connected to our on-premises via Express route.

https://learn.microsoft.com/en-us/azure/azure-functions/create-first-function-cli-powershell?tabs=azure-cli%2Cbrowser

Following the above article, If i create a PowerShell based Azure function , then what is authentication required while calling Azure function from on-premises PowerShell.

1) Can i use Azure Service Principal Based authentication
2) Given that my on-premises is connected to Azure Cloud over Express Route , when i invoke Azure PowerShell function , from on-premises , will the traffic go over internet or over the express route. ?

Answer 1

1) We can use Service principal authentication
2) if we front Azure function app with private link and azure cloud is connected to on-prem via Express Route/VPN, then traffic will go over network

Answer 2

Hello @MS Techie

Regarding #1, assuming that you have established connectivity between the two, you can use AAD on top of that. As for #2, you'll need the right hosting plan, that gives complete control over the network isolation for your PowerShell Function so you can configure ExpressRoute, which is the App Service Environment: https://learn.microsoft.com/en-us/azure/azure-functions/dedicated-plan#app-service-environments