Edit

Kudu service overview

  • Article

Kudu is the engine behind a number of features in Azure App Service related to source control based deployment, and other deployment methods like Dropbox and OneDrive sync.

Access Kudu for your app

Anytime you create an app, App Service creates a companion app for it that's secured by HTTPS. This Kudu app is accessible at:

  • App not in Isolated tier: https://<app-name>.scm.azurewebsites.net
  • Internet-facing app in Isolated tier (App Service Environment): https://<app-name>.scm.<ase-name>.p.azurewebsites.net
  • Internal app in Isolated tier (ILB App Service Environment): https://<app-name>.scm.<ase-name>.appserviceenvironment.net

For more information, see Accessing the kudu service.

Kudu features

Kudu gives you helpful information about your App Service app, such as:

  • App settings
  • Connection strings
  • Environment variables
  • Server variables
  • HTTP headers

It also provides other features, such as:

  • Run commands in the Kudu console.
  • Download IIS diagnostic dumps or Docker logs.
  • Manage IIS processes and site extensions.
  • Add deployment webhooks for Windows apps.
  • Allow ZIP deployment UI with /ZipDeploy.
  • Generates custom deployment scripts.
  • Allows access with REST API.

RBAC permissions required to access Kudu

To access Kudu in the browser with Microsoft Entra authentication, you need to be a member of a built-in or custom role.

  • If using a built-in role, you must be a member of Website Contributor, Contributor, or Owner.
  • If using a custom role, you need the resource provider operation: Microsoft.Web/sites/publish/Action.

More Resources

Kudu is an open source project, and has its documentation at Kudu Wiki.