1

I have a light-weight function running in an Azure Function App. The function connects to an API endpoint over the internet as illustrated in the following diagram. It will always be outbound connections only. enter image description here

My question is do I need to use a web application firewall in front of the Azure Function?

neuro
  • 14,948
  • 3
  • 36
  • 59
atokpas
  • 3,231
  • 1
  • 11
  • 22

1 Answers1

2

Simple answer: No. A Web Application Firewall is in most cases used to filter inbound HTTP traffic. Unless you are afraid of something hijacking your Function and making malicious outbound calls, you don't need that here. And as your Function doesn't have inbound HTTP calls, I really do not see a need for that.

Your external API provider might have a WAF in place, but that is nothing you need to care about.

silent
  • 14,494
  • 4
  • 46
  • 86