Forum Widgets
Latest Discussions
ARM Template to Create Function APP with Vnet Integration
Hi All, We are using the below ARM Template and Parameter file to create Function APP with Vnet Integration. The Template is creating Function app but vnet is not Integrating. We need to create Function app with Vnet Integration using the ARM template and Para file as given below. Template: { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "subscriptionId": { "type": "String" }, "appName": { "type": "string" }, "hostingPlanName": { "type": "string" }, "appinsightname": { "type": "string" }, "subnetid": { "type": "string" }, "sku": { "type": "string" }, "skuCode": { "type": "string" }, "workerSize": { "type": "string" }, "workerSizeId": { "type": "string" }, "numberOfWorkers": { "type": "string" }, "storageAccountName": { "type": "string" }, "storageRgName": { "type": "string" }, "use32BitWorkerProcess": { "type": "string" }, "serverFarmResourceGroup": { "type": "string" } }, "resources": [ { "type": "Microsoft.Web/sites", "apiVersion": "2018-11-01", "name": "[parameters('appName')]", "location": "East US", "dependsOn": [ "[resourceId('Microsoft.Web/serverfarms/', parameters('hostingPlanName'))]", "[resourceId('microsoft.insights/components/', parameters('appinsightname'))]", "[resourceId('Microsoft.Storage/storageAccounts/', parameters('storageAccountName'))]" ], "kind": "functionapp", "properties": { "name": "[parameters('appName')]", "siteConfig": { "appSettings": [ { "name": "FUNCTIONS_EXTENSION_VERSION", "value": "~3" }, { "name": "FUNCTIONS_WORKER_RUNTIME", "value": "dotnet" }, { "name": "AzureWebJobsStorage", "value": "[concat('DefaultEndpointsProtocol=https;AccountName=',parameters('storageAccountName'),';AccountKey=',listKeys(resourceId(parameters('subscriptionId'),parameters('storageRgName'),'Microsoft.Storage/storageAccounts', parameters('storageAccountName')), '2019-06-01').keys[0].value,';EndpointSuffix=','core.windows.net')]" }, { "name": "WEBSITE_CONTENTAZUREFILECONNECTIONSTRING", "value": "[concat('DefaultEndpointsProtocol=https;AccountName=',parameters('storageAccountName'),';AccountKey=',listKeys(resourceId(parameters('subscriptionId'),parameters('storageRgName'),'Microsoft.Storage/storageAccounts', parameters('storageAccountName')), '2019-06-01').keys[0].value,';EndpointSuffix=','core.windows.net')]" }, { "name": "WEBSITE_CONTENTSHARE", "value": "[concat(toLower(parameters('appName')), '978c')]" }, { "name": "APPINSIGHTS_INSTRUMENTATIONKEY", "value": "[reference(concat('microsoft.insights/components/', parameters('appinsightname'))).InstrumentationKey]" } ], "use32BitWorkerProcess": "[parameters('use32BitWorkerProcess')]" }, "serverFarmId": "[concat('/subscriptions/', parameters('subscriptionId'),'/resourcegroups/', parameters('serverFarmResourceGroup'), '/providers/Microsoft.Web/serverfarms/', parameters('hostingPlanName'))]", "clientAffinityEnabled": true } }, { "type": "microsoft.insights/components", "apiVersion": "2014-04-01", "name": "[parameters('appinsightname')]", "location": "eastus", "kind": "other", "properties": { "ApplicationId": "[parameters('appinsightname')]" } }, { "type": "Microsoft.Storage/storageAccounts", "apiVersion": "2021-06-01", "name": "[parameters('storageAccountName')]", "location": "eastus", "sku": { "name": "Standard_LRS", "tier": "Standard" }, "kind": "StorageV2", "properties": { "minimumTlsVersion": "TLS1_2", "allowBlobPublicAccess": false, "networkAcls": { "resourceAccessRules": [], "bypass": "AzureServices", "ipRules": [], "defaultAction": "Allow" }, "supportsHttpsTrafficOnly": true, "encryption": { "services": { "file": { "keyType": "Account", "enabled": true }, "blob": { "keyType": "Account", "enabled": true } }, "keySource": "Microsoft.Storage" }, "accessTier": "Hot" } }, { "type": "Microsoft.Web/serverfarms", "apiVersion": "2018-02-01", "name": "[parameters('hostingPlanName')]", "location": "eastus", "sku": { "Tier": "[parameters('sku')]", "Name": "[parameters('skuCode')]" }, "kind": "", "properties": { "name": "[parameters('hostingPlanName')]", "workerSize": "[parameters('workerSize')]", "workerSizeId": "[parameters('workerSizeId')]", "numberOfWorkers": "[parameters('numberOfWorkers')]" } }, { "type": "Microsoft.Web/sites/virtualNetworkConnections", "apiVersion": "2021-02-01", "name": "[format('{0}/{1}', parameters('appName'), 'functionapp-snet')]", "location": "eastus", "properties": { "vnetResourceId": "[parameters('subnetid')]", "isSwift": true }, "dependsOn": [ "[resourceId('Microsoft.Web/sites', parameters('appName'))]" ] } ] } Para file: { "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", "contentVersion": "1.0.0.0", "parameters": { "subscriptionId": { "value": "" }, "appName": { "value": "" }, "hostingPlanName": { "value": "" }, "appinsightname": { "value": "" }, "sku": { "value": "" }, "skuCode": { "value": "" }, "workerSize": { "value": "" }, "workerSizeId": { "value": "" }, "numberOfWorkers": { "value": "" }, "storageAccountName": { "value": "" }, "storageRgName": { "value": "" }, "use32BitWorkerProcess": { "value": "" }, "serverFarmResourceGroup": { "value": "" }, "subnetid" :{ "" } }
User flows in Azure AD
I am trying to use a self-service sign-up user flow in Azure AD to use custom attributes. I have configured the identity providers, custom attributes, and application in the user flow: Yet, when I try to sign up as a new user to the selected application, I don't get any sign-up form being displayed wherein I can fill in values of my custom attributes and add users with external details. Can you help me if I am missing anything?
Azure Service Bus: Log all activities to the messages in a queue?
Hi, I am looking into a way to monitor all activities in a message queue such as sending to and picking up messages from a queue. I look at the logs in the admin portal but it does not seem to provide specifics. I tried to run in the service bus: AzureDiagnostics | where ResourceProvider == "MICROSOFT.SERVICEBUS" | where Category == "OperationalLogs" Is there a way to log details such as source/action/queue? Thanks.
Azure App Service - Disable Weak ciphers
Hi Team, We have application deployed to Azure App service. our IT security team has detected weak ciphers are enabled during secure communication (SSL). Recommended approach is to allow only strong ciphers to protect secure communication. In on-prem, we can update the registry, however, i would like to know the best practices for Azure app service. --------------------------------- List of Supported Weak Ciphers TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003D) TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003C) TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) TLS_RSA_WITH_AES_128_CBC_SHA (0x002F) TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xC028) TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027) TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014) TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013)
How to connect & setup webApp in azure and R client? OR Is anything do in SAS can be done PAAS Azure
Hi, I have Azure SAS virtual machine and Azure PAAS account. I have done webapp and R server in Azure sas server, if any one know how to setup webapp and R server in azure PAAS server. And how to establish communication bw them. Thanks Ancil
Unable to setup Solr on Linux WebApp
Hi there, I have trying to setup the Solr app on a Linux WebApp as a PaaS, but haven't gotten any success yet. There are many online discussions that talk about setting up the Solr on Windows WebApp, but not linux. Here is what I have tried so far: 1 - Added Web.conf in wwwroot - this is similar to setting it up on Windows WebApp, but this hasn't worked. 2 - Installing Solr as a service - I tried executing <solr_extraction_dir>/bin/install_solr_as_service.sh, but I get error that there is no user solr. 3 - Adding startup command "java -jar /home/site/wwwroot/server/start.jar" and I get following error. Usage: java -jar $JETTY_HOME/start.jar [options] [properties] [configs] java -jar $JETTY_HOME/start.jar --help # for more information 4 - Solr on port 80 - tried running Solr on port 80 using "solr start -p 80", but can't access the SOLR, using the webapp URL. Any help with steps would be appreciated.poweshell script to create app service plan for P1mv3
Hi team, we are trying to create an Azure app service plan using Power shell script with pricing tier Premium p1mV3, but always creating as Premium P1 and the same issue happens while we creating Premium P0V3 PS script - New-AzAppServicePlan -Name "app-service-plan-name" -ResourceGroupName "rg-name" -Location "East US" -Tier P1mv3 -WorkerSize Small Note= We could able to create an app service plan with Premium v3 P1mv3 manually from the Azure portal in the new RG. Please help on creating an exact script to create Premium P1mv3 and Premium P0V3 using Powershell Actual result: actual.img Expected Result: expected1.img, expected2.imgIssue in access eventgrid using private end point
Hi experts, I need help in the below situation 1. Created a event grid topic( dynamic up for the url (https://sample-interviewupdates.westeurope-1.eventgrid.azure.net/api/events) that is generated) 2. Vnet created with a subnet ( ex10.1.0.10) https://l.facebook.com/l.php?u=https%3A%2F%2F10.1.0.10%2F16%3Ffbclid%3DIwAR0qTBHUzpEM6v8sqUSC08QKQy1UoE7KamgQUuPQ4b2FEkrbbKYISz69cKs&h=AT1mHNPFBvTAk31Bo3LXJWE8psz96GioQsS39LRUOXANUOo4irW7HrHiwO_1jfBzftyjdPR1BRXp0pQzsaKj6T4t3YKDSFkIl2FY6CaPLAwDL5SRUe-6DmJ0IuX_4D45pxQ&__tn__=-UK-R&c[0]=AT0WnODKMPlOmcVtvGahWZAws61W5GIAet-hYmP3DE9eWKFqJ-OQlJL2RUZtVMJrMvC9I6IEgpuPPIUzc4L3ng4-Mf_43i3eRDLmoap28zb-E3lWxF_nK4UsghUNCxGTLH57Yd4a5d5xpGiOcLbf8RjfXy-CGFjv0CriktGRUez2M3Lbd7_IY3_29KZspuTYBbk3BVR2SfM_ 3. Virtual network gateway for vnet 4. I have on premise vpn with firewall 5. Local network gateway with above vpn network details(ex 198.1.1.1) 6. Created private endpoint for event grid by mapping above vnet. (https://sample-interviewupdates.westeurope-1.privatelink.eventgrid.azure.net/api/events) and ip mapping https://l.facebook.com/l.php?u=https%3A%2F%2F10.1.0.10%2F16%3Ffbclid%3DIwAR0qTBHUzpEM6v8sqUSC08QKQy1UoE7KamgQUuPQ4b2FEkrbbKYISz69cKs&h=AT1mHNPFBvTAk31Bo3LXJWE8psz96GioQsS39LRUOXANUOo4irW7HrHiwO_1jfBzftyjdPR1BRXp0pQzsaKj6T4t3YKDSFkIl2FY6CaPLAwDL5SRUe-6DmJ0IuX_4D45pxQ&__tn__=-UK-R&c[0]=AT0WnODKMPlOmcVtvGahWZAws61W5GIAet-hYmP3DE9eWKFqJ-OQlJL2RUZtVMJrMvC9I6IEgpuPPIUzc4L3ng4-Mf_43i3eRDLmoap28zb-E3lWxF_nK4UsghUNCxGTLH57Yd4a5d5xpGiOcLbf8RjfXy-CGFjv0CriktGRUez2M3Lbd7_IY3_29KZspuTYBbk3BVR2SfM_ 7. Client applications which is in vpn network trying to access the event grid with its url not working. Tried to ping url it’s showing dynamic of event grid not the private end point. Do you have any clue what could be the reason?? It seems local @firewall has an issue or routing issue?? Thankyou in advance
