Category: Security

Azure Function Access Restriction

Security Cyber Benjamin Perkins

If you wanted to block inbound traffic to your Azure Function, one option is to use an Access Restriction.  To check if you have one, navigate to the Networking blade for your Azure Function and check if Access restriction is On. Figure 1, Access Restriction and Azure Functions Take caution that although this let’s you […]

Read More →

Machine Keys on an Azure App Service, machineKey multiple, different data centers, regions on Azure

Azure App Service Benjamin Perkins

I wrote this article some time ago, Machine Keys on an Azure App Service, machineKey multiple instances Azure, which describes how and why there are no problems running on multiple instances of your App Service Plan, so long as they are in the same region or datacenter.  This is because, as part of the App […]

Read More →

How to get a Bearer access token for Azure

Security Cyber Benjamin Perkins

Even though I am not a security expert, it has always interested me.  When I worked on the IIS team some years back, pre Azure and pre Cloud days the protocol mostly used for large corporations was Kerberos.  Initially, troubleshooting those issues would give me sleepless nights, but over some years you begin to see […]

Read More →

WEBSITE_VNET_ROUTE_ALL and Azure Functions

Azure Benjamin Perkins

This would apply to Azure App Services too. This is an interesting feature.  To me it resembles or provides the ability to force tunnel.  The implementations of forced tunneling I have seen have typically been configured using route tables.  Where the route table is a matrix of IP addresses (see Figure 6) that instructs TCP […]

Read More →

Microsoft Authenticator App

Security Cyber Benjamin Perkins

If you are still using UID and Password as the only means for authentication, you might consider implementing Multi Factor Authentication (MFA).  One way to do this is by using the Microsoft Authenticator App which you can read all about it here.  I am writing this mostly to help me remember how I configured it […]

Read More →