services / Azure / Web Apps slot Functions host function keys

Functions host function keys are app-level bearer credentials valid for invoking any function across the function app slot.

Credential material gating app-wide function invocation; invoked functions run under the app's assigned managed identity.

Microsoft.​Web/​Sites/​slots/​host/​functionkeys/​delete

Deleting a host-level function key destroys credential material valid across all functions in the app and revokes the invocation access legitimate callers depend on, denying authorized access app-wide.

Risks

1. Cryptographic destruction (CRITICAL)
2. Denial-of-service (HIGH)
3. Denial-of-access (EVASION)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links