Application-level security
In serverless computing, application-level security is where the developer should focus the majority of their efforts, as most of the other layers can be provided by the platform. Regardless of how secure the Azure platform is, if the application code exposes sensitive information, or is vulnerable to attacks, the platform-level security will not help.
Authorization and authentication
To secure access to your Azure Functions' endpoints to only allowed users, you can use authentication and/or authorization.
Authentication is the process of verifying who you are. Authorization is the process of verifying what you have access to. Authentication and authorization can be used in combination, or separately.
Out-of-the-box, Azure supports both authentication and authorization for HTTP-triggered functions. Additional or alternative authentication and authorization procedures can be implemented in the function's code.
An HTTP-triggered function can be deployed in one of the...
