In serverless computing, application-level security is where the developer should focus the majority of their efforts, as most of the other layers can be provided by the platform. Regardless of how secure the Azure platform is, if the application code exposes sensitive information, or is vulnerable to attacks, the platform-level security will not help.
Application-level security
Authorization and authentication
To secure access to your Azure Functions' endpoints to only allowed users, you can use authentication and/or authorization.
Authentication is the process of verifying who you are. Authorization is the process of verifying what you have access to. Authentication and authorization can be used in combination, or separately...
