steampipe plugin install azuresteampipe plugin install azure

Table: azure_app_service_function_app - Query Azure App Service Function Apps using SQL

Azure App Service Function Apps is a service within Microsoft Azure that allows developers to host and run functions in the cloud without having to manage any infrastructure. It offers an event-driven, compute-on-demand experience that extends the existing Azure App Service platform. With Azure Function Apps, developers can quickly create serverless applications that scale and integrate with other services.

Table Usage Guide

The azure_app_service_function_app table provides insights into Function Apps within Azure App Service. As a developer or DevOps engineer, explore Function App-specific details through this table, including configuration settings, app settings, and connection strings. Utilize it to uncover information about Function Apps, such as their runtime versions, hosting details, and the state of always-on functionality.

Examples

List of app functions which accepts HTTP traffic

Determine the areas in which Azure app services function apps are configured to accept HTTP traffic, which can be useful for identifying potential security risks associated with unencrypted data transmission.

select
  name,
  https_only,
  kind,
  region
from
  azure_app_service_function_app
where
  not https_only;

select
  name,
  https_only,
  kind,
  region
from
  azure_app_service_function_app
where
  https_only = 0;

List of all unreserved app function

Discover the segments that comprise all unreserved function apps in Azure. This query is useful in managing resources and ensuring optimal performance by identifying potential areas for reallocation.

select
  name,
  reserved,
  resource_group
from
  azure_app_service_function_app
where
  not reserved;

select
  name,
  reserved,
  resource_group
from
  azure_app_service_function_app
where
  reserved = 0;

Outbound IP addresses and possible outbound IP addresses info of each function app

Gain insights into the outbound IP addresses associated with each function app, as well as potential outbound IP addresses. This information can be useful for managing network security and understanding your app's communication pathways.

select
  name,
  outbound_ip_addresses,
  possible_outbound_ip_addresses
from
  azure_app_service_function_app;

select
  name,
  outbound_ip_addresses,
  possible_outbound_ip_addresses
from
  azure_app_service_function_app;

List of app functions where client certificate mode is disabled.

Identify instances where the client certificate mode is disabled in your Azure app functions. This can help enhance security by pinpointing areas where client authentication is not enforced.

select
  name,
  client_cert_enabled,
  kind,
  region
from
  azure_app_service_function_app
where
  not client_cert_enabled;

select
  name,
  client_cert_enabled,
  kind,
  region
from
  azure_app_service_function_app
where
  client_cert_enabled = 0;

Control examples

Schema for azure_app_service_function_app

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form, e.g. connection_name.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
auth_settings	jsonb		Describes the Authentication/Authorization settings of an app.
client_affinity_enabled	boolean		Specify whether client affinity is enabled.
client_cert_enabled	boolean		Specify whether client certificate authentication is enabled.
cloud_environment	text		The Azure Cloud Environment.
configuration	jsonb		Describes the configuration of an app.
default_site_hostname	text		Default hostname of the app.
enabled	boolean		Specify whether the app is enabled.
host_name_disabled	boolean		Specify whether the public hostnames of the app is disabled.
host_names	jsonb		A list of hostnames associated with the app.
https_only	boolean		Specify whether configuring a web site to accept only https requests.
id	text		Contains ID to identify an app service function app uniquely.
kind	text		Contains the kind of the resource.
name	text	=	The friendly name that identifies the app service function app.
outbound_ip_addresses	text		List of IP addresses that the app uses for outbound connections (e.g. database access).
possible_outbound_ip_addresses	text		List of possible IP addresses that the app uses for outbound connections (e.g. database access).
region	text		The Azure region/location in which the resource is located.
reserved	boolean		Specify whether the app is reserved.
resource_group	text	=	The resource group which holds this resource.
site_config	jsonb		A map of all configuration for the app
state	text		Current state of the app.
subscription_id	text		The Azure Subscription ID in which the resource is located.
tags	jsonb		A map of tags for the resource.
title	text		Title of the resource.
type	text		The resource type of the app service function app.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- azure

You can pass the configuration to the command with the --config argument:

steampipe_export_azure --config '<your_config>' azure_app_service_function_app