Azure / Azure/azure-cli

Add support for --public-network-access for az functionapp config namespace

Open
#24,947 17 comments 0 reactions 0 assignees View on GitHub
act-observability-squad Auto-Assign azf_feature_request azf_reviewed customer-reported feature-request Functions needs-team-attention Service Attention Web Apps
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

There seems to be no way of setting the publicNetworkAccess attribute value (Enabled or Disabled) of the functionapp namespace, neither during creation, nor update (with az functionapp config create|update).

This means that, although we can automate the creation of Function App Inbound Private Endpoints and Function App VNet Integrations, we must go to each Function App and manually disable Public Access to our Function Apps.

**Describe the solution you'd like**
I'd simply like/expect to be able to run any of the following commands:

- az functionapp config --name myFA --resource-group myRG --public-network-access enabled
- az functionapp config --name myFA --resource-group myRG --public-network-access disabled

- OR -

- az functionapp config --ids myFAID --resource-group myRG --public-network-access enabled
- az functionapp config --ids myFAID --resource-group myRG --public-network-access disabled

**Describe alternatives you've considered**
It doesn't exist under "az webapp config set" either.

**Additional context**
Without this, everyone who wishes to create or manage secure Function Applications must go directly to each resource and toggle this attribute, manually, while the rest of the same page can be updated via the Azure CLI:

![AccessRestriction-Main](https://user-images.githubusercontent.com/59934454/208807330-9c2cdd6e-f6b3-4ac4-9fe7-2643196d1f1b.PNG)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.