Summary

In this chapter, we reviewed the different layers of application security as it pertains to serverless computing.

First, we have covered networking security, and the three different options for integration of Azure Functions with a private network based in Azure or even on-premise. We have discussed securing the application access with Network Security Groups -- Azure network firewalls.

We reviewed authentication, authorization, and key management of Azure Functions in detail, and provided steps for configuring different authentication and authorization types. We have provided a step-by-step guide for configuring the Function App authentication using Azure Active Directory and Facebook as identity providers.

We also reviewed the options available for data encryption in transit and at rest, configuring a custom domain and SSL certificate for the Function App, and setting up CORS.

Lastly, we have looked at identity and access from two standpoints: one of securing user access to the application...