Encypting service bus connection string in Azure Function

Question

I have a working azure function which puts a message on a service bus queue.

public static void Run(
        [TimerTrigger("0 * * * *")]TimerInfo myTimer,
        [ServiceBus("queueName", Connection = "ServiceBusConnection")] ICollector<Message> queue,
        TraceWriter log)
    {
        //function logic here
    }

The connection string is currently in the plain text in the app settings. Is it possible to have this encyrpted and still use the built in integration between azure functions and the service bus?

I have tried creating a ServiceBusAttribute at runtime but it doesn't look like you can pass it a connection string.

Any help is much appreciated

silent silent · Accepted Answer · 2018-07-07T16:38:25

This is currently not possible. There is a feature request to retrieve secrets used in bindings from KeyVault: https://github.com/Azure/azure-webjobs-sdk/issues/746

The GitHub issue also describes a workaround to retrieve the secrets from KeyVault at build time within VSTS.

Encypting service bus connection string in Azure Function

1 Answers