You may need to access storage files for your site, whether it is a Logic App Standard, Function App, or App Service. Depending on your ASP SKU, these files can be accessed using FTP/FTPS. Some customers encounter difficulties when attempting to connect using Implicit/Explicit FTPS. This post aims to simplify this process by utilizing a Logic App to list files, retrieve file content, and update files.
You may need to access storage files for your site, whether it is a Logic App Standard, Function App, or App Service. Depending on your ASP SKU, these files can be accessed using FTP/FTPS. Some customers encounter difficulties when attempting to connect using Implicit/Explicit FTPS. This post aims to simplify this process by utilizing a Logic App to list files, retrieve file content, and update files.
Explicit FTPS connection will be used in this scenario as it is the one mutually supported by the FTP Connector and by the FTP site when using FTPS.
Steps:
Create a user/pass credentials to access the FTP site.
You can do it from the Portal or using CLI.
You can run a command Shell from the below reference to execute the command.
Reference: Configure deployment credentials - Azure App Service | Microsoft Learn
CLI: az webapp deployment user set --user-name <username> --password <password>
Portal:
Enable FTP Basic Authentication on the Destination (Logic App Standard, Function App, App Services):
It is highly advised to use "FTPS only" connection as it provides a secure encrypted connection.
To disable unencrypted FTP, select FTPS Only in FTP state. To disable both FTP and FTPS entirely, select Disabled. When finished, select Save. If using FTPS Only, you must enforce TLS 1.2 or higher by navigating to the TLS/SSL settings page of your web app. TLS 1.0 and 1.1 aren't supported with FTPS Only.
Reference: Deploy content using FTP/S - Azure App Service | Microsoft Learn
The FTP Connector supports Explicit connection only: FTP - Connectors | Microsoft Learn
- For secure FTP, make sure to set up explicitFile Transfer Protocol Secure (FTPS), rather than implicit FTPS. Also, some FTP servers, such as ProFTPd, require that you enable the NoSessionReuseRequired option if you use Transport Layer Security (TLS) mode, the successor to Secure Socket Layer (SSL).
The FTP connector doesn't work with implicit FTPS and supports only explicit FTP over FTPS, which is an extension of TLS.
Create Logic App and FTP Connection:
Create the Logic App workflow, add an FTP Action to List the Files, or any FTP Action based on your requirements. To test the connection for the first time, I recommend using the "List files in folder" Action.
In the connection configuration:
Server Address: xxxxxxx.ftp.azurewebsites.windows.net (Get this value from the Properties of the Destination service, don't add the "ftps://" section nor the "/site/wwwroot" section)
User Name and Password: xxxxxx\xxxxx (This is what we created in the FTP credentials tab under the Deployment Center, in the User scope section, or using the CLI command)
FTP Server Port: 21 (use Port 21 to force the connection to be Explicit)
Enabled SSL?: checked (use SSL to force the connection to use FTPS)
Create Logic App FTP Connection:
After creating the connection, use "/site/wwwroot" to access your folder:
Test this and see if it works!
Troubleshooting:
Reference: Deploy content using FTP/S - Azure App Service | Microsoft Learn
I recommend to secure the connection password using KeyVault. More on that below.
Secure Parameters in Keyvault:
Main steps:
- Put the connection string in KeyVault.
- Give Access to the Logic App on KeyVault.
- Add the reference in App Settings for the Logic App.
The steps mentioned here: Use Key Vault references - Azure App Service | Microsoft Learn
Example of this at the end of this article: A walkthrough of parameterization of different connection types in Logic App Standard | Microsoft Community Hub
And that's how you access those files! You can make use of this secure connection for multiple tasks based on your requirements.
Microsoft