intermediate

App Service

Host web apps and APIs on a managed platform with deployment slots, scaling settings, domains, TLS, and app configuration.

Azure App Service is a managed PaaS for web apps, APIs, and background workers. You deploy code or containers, map custom domains, terminate TLS, and scale by instance count or autoscale rules without managing VMs.

| Feature | Interview relevance | |---------|-------------------| | Deployment slots | Staging swap with warm-up and rollback | | App settings | Environment-specific config and connection strings | | Always On | Keeps idle apps warm; affects cold-start behavior | | VNet integration | Private access to databases and internal APIs |

					az webapp deployment slot create --name api --resource-group rg --slot staging
az webapp deployment slot swap --name api --resource-group rg --slot staging
				

On interviews: when App Service beats AKS or Functions; slot swap versus blue/green; scaling limits; managed identity to Azure SQL or Blob Storage; and how you would roll back a bad deploy.

Common pitfalls: storing secrets in app settings without Key Vault references; slot settings that drift from production; Always Off on production APIs; and treating local filesystem as durable storage.

The trade-off is operational simplicity and fast deploys versus less control over the runtime, networking, and scaling granularity than containers on AKS.

Checklist:

  • Use deployment slots for zero-downtime releases.
  • Externalize secrets via Key Vault references.
  • Enable autoscale with sane min/max bounds.
  • Integrate VNet when data plane must stay private.
  • Monitor HTTP 5xx, latency, and CPU/memory saturation.