Azure Function with public access disabled

[kaushikc139]

I have disabled public acess of Azure Function. The function is not integrated with VNet and does not have any private endpoint. I confirmed that if I call the function Url from Postman I get 403 Ip Forbidden, which is expected. However, when I configure the function as backend for Api Management intgrated with VNet , I am still able to call it and get 200 Ok response. How is this possible?

[#2]

@kaushikc139 

Worth to refer this:

https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration

[#3]

Thanks, will check it out.

[#4 · Accepted solution]

I was able to find the reason for this- the function was getting called with service endpoint which got created by default when integrating Api management with VNet