Table of Contents

1. Challenge

   Using Visual Studio code, create and configure an Azure Function with a HTTP trigger that can be called by a GitHub webhook

   • Review lab resources
   • Connect to the Developer virtual machine using Remote Desktop Protocol (RDP)
   • Create an Azure Function App project.
   • Create a Function App in Azure.
2. Challenge

   Using the Azure Portal and Azure CLI, store and retrieve secrets from Key Vault using Azure Functions

   • Retrieve the function key.

   • Store the Azure Function key in the existing Azure Key vault as a secret. The following code will be used:

     RG=$(az group list --query [].name --output tsv)
     KV=$(az keyvault list --resource-group $RG --query [].name --output tsv)
     APP=$(az functionapp list --resource-group $RG --query [].name --output tsv)
     SECRET_URI=$(az keyvault secret list --vault-name $KV --query [].id -o tsv)
     MI=$(az identity list --resource-group $RG --query [].id -o tsv)
     

     
     az functionapp update 
     --resource-group $RG 
     --name $APP 
     --set keyVaultReferenceIdentity=${MI}
     

   • Configure the Function app to retrieve the secret using the existing user-assigned Managed Identity. The following code will be used:

     az webapp config appsettings set 
     --resource-group $RG 
     --name $APP 
     --settings GITHUB_WEBHOOK_SECRET="@Microsoft.KeyVault(SecretUri=${SECRET_URI})"
     

   • Configure the Function app to pass the secret value as an environment variable.

3. Challenge

   Configure a GitHub webhook that triggers an Azure Function, to integrate GitHub events with Azure functions to securely monitor and respond to repository updates

   • Retrieve the Function URL.
   • Create a new repository on GitHub.
   • Configure a webhook on the GitHub repository.
4. Challenge

   Update, deploy, and test an Azure Function to process and verify GitHub webhook payloads securely

   • Update and deploy the Function to process the webhook payload and verify the secret.
   • Test the function by editing a file in the GitHub repository.