> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/azure-identities/azure-resource-management/function-apps.md).

# Function Apps

Analyze, search and export all Function apps.

The `Function Apps` page provides a list of enumerated Azure Function apps. The list contains the `Name`, `Risk (%)`, `Exposure Point` and `Issue Counts`.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-5e277bf550607b1868d390891ad1875d2aa1510d%2FfunctionApps_list.PNG?alt=media" alt=""><figcaption><p>Function Apps</p></figcaption></figure>

#### Function Apps Details

Details page contains the `Risk Score` of the function app, `Exposure Point` and `Information` panes.

> Info You can analyze objects in the `Graph module` by clicking the `Visualize` button on the upper left side of the `Information Pane`.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-3d06917d4d4873f65f45cc81eeea5d9d28632c0b%2FfunctionApps_details.PNG?alt=media" alt=""><figcaption><p>Function Apps Details</p></figcaption></figure>

#### Information

`Information Pane` contains `Details` and `Managed Identities` tabs.

#### Details

Details tab contains attributes below about the function app.

| Attribute         | Description                                                   |
| ----------------- | ------------------------------------------------------------- |
| Name              | The display name of the function app with tenant suffix       |
| Location          | The Azure region where the function app is deployed           |
| Kind              | The kind of App Service resource (e.g., functionapp, linux)   |
| State             | The current state of the function app (e.g., Running)         |
| Default Host Name | The default hostname assigned to the function app             |
| HTTPS Only        | Indicates whether the function app accepts only HTTPS traffic |
| Tenant            | The tenant the function app belongs to                        |
| Resource Group    | The resource group the function app is associated with        |

**Runtime**

When runtime configuration is available, the following attributes are shown in a separate **Runtime** section.

| Attribute                   | Description                                            |
| --------------------------- | ------------------------------------------------------ |
| Runtime Stack               | The application runtime stack (e.g., DOTNET, NODE)     |
| Runtime Version             | The version of the runtime stack                       |
| Functions Extension Version | The Azure Functions host extension version (e.g., \~4) |
| Linux Stack Version         | The Linux FX version string                            |
| Windows Stack Version       | The Windows FX version string                          |

#### Managed Identities

The `Managed Identities` tab lists Azure Active Directory service principals (managed identities) assigned to the function app. A managed identity lets the function app authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this function app, so these identities are part of its attack surface.

| Attribute    | Description                                                 |
| ------------ | ----------------------------------------------------------- |
| Name         | The display name of the managed identity with tenant suffix |
| Display Name | The display name of the service principal                   |
| Type         | The service principal type (e.g., ManagedIdentity)          |

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-ad8be97d76e7c57663ef592fc66454ef7e4fa5e4%2FfunctionApps_managed_identites.PNG?alt=media" alt=""><figcaption><p>Managed Identities</p></figcaption></figure>
