https://github.com/georgeosddev/appservice-certrificate-expiration-checker

https://github.com/georgeosddev/appservice-certrificate-expiration-checker

Last synced: 2 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/georgeosddev/appservice-certrificate-expiration-checker
• Owner: georgeOsdDev
• Created: 2023-01-13T11:30:26.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2023-12-15T11:38:38.000Z (over 1 year ago)
• Last Synced: 2025-01-20T19:34:08.242Z (4 months ago)
• Language: JavaScript
• Size: 215 KB
• Stars: 0
• Watchers: 3
• Forks: 0
• Open Issues: 4
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Azure App Service Certificate expiration checker

Run [Azure Resource Graph](https://learn.microsoft.com/en-us/azure/governance/resource-graph/overview) API daily by using [Azure Functions TimerTrigger](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer?tabs=in-process&pivots=programming-language-csharp) to check [App Service Certificate](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Cportal) status.

If a certificate that is about to expire is found, alert notification will send using [Azure Monitor](https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-types#log-alerts)

## Usage

1. Enable [Managed Identity](https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity?toc=%2Fazure%2Fazure-functions%2Ftoc.json&tabs=portal%2Chttp) for Function App

2. Assign Subscription's built in [Reader](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#reader) Role to above id.

    ![](docs/RoleAssignments.jpg)

3. Edit AppSettings of Function App

   - `subscriptionId` : target subscription to check

   - `expireThreshold` : expire threshold days, default 90

4. Setup Azure Monitor log alert

    ![](docs/AlertRule.jpg)