Azure Function访问私有资源 [英] Azure Function access private resources

问题描述

我们在Azure上设置了一个包含Azure AD，VM等的基础结构.我们使用Azure Active Directory域服务将服务器加入域，并且还对某些特定应用程序进行本地AD身份验证.

We have setup an infrastructure on Azure containing Azure AD , VM's etc. We use Azure Active Directory Domain Services to have the servers domain-joined and alsoo for local AD-authentication for some specific applications.

我想编写一些自定义Azure函数，这些函数可访问Azure Active Directory域服务以查询某些特定的AD属性，例如msDS-UserPasswordExpiryTimeComputed.这些属性不会在Azure AD中公开.

I would like to write some custom Azure functions that access the Azure Active Directory Domain Services for querying some specific AD-properties like msDS-UserPasswordExpiryTimeComputed. Those properties are not exposed in Azure AD.

Azure功能可以访问仅公开到虚拟网络中的资源吗?拥有一个应用服务计划(基本或高级)足以访问这些内部资源? 还是不支持?

Can an Azure function access resources that are only exposed into a Virtual Network? It is sufficient to have an App Service plan (Basic or Premium) to access these internal resources? Or is this not supported?

最诚挚的问候， 詹斯

推荐答案

应该可以使用App Service或App Service Environments(ASE)的VNET集成功能.请参见此处欲获得更多信息.请注意，此文档尚未针对Azure Functions进行更新，但是只要您在标准/高级App Service计划或ASE上创建Azure Functions，则相同的过程应该可以工作.请注意，如果您尝试对功能应用程序使用消耗(以前称为动态)计划，则此方法将无效.

It should be possible using the VNET integration feature of App Service, or App Service Environments (ASE). See here for more information. Note that this document has not been updated for Azure Functions but the same process should work as long as you are creating Azure Functions on your standard/premium App Service plan or on an ASE. Please note that this won't work if you are trying to use the consumption (previously known as dynamic) plan for your function apps.

这篇关于Azure Function访问私有资源的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！