Using VS Code to Create a Function Triggered by a GitHub Webhook with a Secure Payload

Retrieve the function key.

Store the Azure Function key in the existing Azure Key vault as a secret. The following code will be used:

RG=$(az group list --query [].name --output tsv)
KV=$(az keyvault list --resource-group $RG --query [].name --output tsv)
APP=$(az functionapp list --resource-group $RG --query [].name --output tsv)
SECRET_URI=$(az keyvault secret list --vault-name $KV --query [].id -o tsv)
MI=$(az identity list --resource-group $RG --query [].id -o tsv)

az functionapp update 
--resource-group $RG 
--name $APP 
--set keyVaultReferenceIdentity=${MI}

Configure the Function app to retrieve the secret using the existing user-assigned Managed Identity. The following code will be used:

az webapp config appsettings set 
--resource-group $RG 
--name $APP 
--settings GITHUB_WEBHOOK_SECRET="@Microsoft.KeyVault(SecretUri=${SECRET_URI})"

Configure the Function app to pass the secret value as an environment variable.