Kudu service overview
Kudu is the engine behind a number of features in Azure App Service related to source control based deployment, and other deployment methods like Dropbox and OneDrive sync.
Access Kudu for your app
Anytime you create an app, App Service creates a companion app for it that's secured by HTTPS. This Kudu app is accessible at:
- App not in Isolated tier:
- Internet-facing app in Isolated tier (App Service Environment):
- Internal app in Isolated tier (ILB App Service Environment):
For more information, see Accessing the kudu service.
Kudu gives you helpful information about your App Service app, such as:
- App settings
- Connection strings
- Environment variables
- Server variables
- HTTP headers
It also provides other features, such as:
- Run commands in the Kudu console.
- Download IIS diagnostic dumps or Docker logs.
- Manage IIS processes and site extensions.
- Add deployment webhooks for Windows apps.
- Allow ZIP deployment UI with
- Generates custom deployment scripts.
- Allows access with REST API.
RBAC permissions required to access Kudu
To access Kudu in the browser with Microsoft Entra authentication, you need to be a member of a built-in or custom role.
- If using a built-in role, you must be a member of Website Contributor, Contributor, or Owner.
- If using a custom role, you need the resource provider operation: