How to configure Azure Function access restrictions to allow for testing via portal

Question

I've got my Azure function app set to restrict access to just the APIM public IP and my desktop IP. I seem though to be unable to test the function within the portal itself (i.e. going to MyFunctionAppName > TestFunction > Code + Test > Test/Run) as I get an error saying "You must have direct network access in order to run your function. Your app may be restricted with Private Endpoints, Access Restrictions or Service Endpoints." I'm not sure if there's an IP I need to add or something else to let me test via the portal itself.

Answer 1

Just figured this out for myself. Go to the Function App > Networking > Access Restriction > Check Allow Public Access > Add a rule. When you're adding the rule, change the type to Service Tag and select AzureCloud for the Service Tag. Save the rule and it should work now. Like Elthan said...

This whitelists all datacenter public IPs, which will allow you to use the Test/Run feature through the Azure Portal again

Answer 2

I was struggling with the same thing after adding VNets. The issue is as mentioned earlier that the requests originate from an Azure IP, a list of them can be found here. As you can see from the link, it's a lot of possible IPs and they frequently change. What I found however is that you can now whitelist a Service Tag named AzureCloud. This whitelists all datacenter public IPs, which will allow you to use the Test/Run feature through the Azure Portal again.