Edit

Kudu service overview

  • Article

Kudu is the engine behind some features in Azure App Service that are related to source-control-based deployment and other deployment methods, like Dropbox and OneDrive sync.

Access Kudu for your app

Anytime you create an app, App Service creates a companion app for it that's secured by HTTPS. This Kudu app is accessible at these URLs:

  • App not in the Isolated tier: https://<app-name>.scm.azurewebsites.net
  • Internet-facing app in the Isolated tier (App Service Environment): https://<app-name>.scm.<ase-name>.p.azurewebsites.net
  • Internal app in the Isolated tier (App Service Environment for internal load balancing): https://<app-name>.scm.<ase-name>.appserviceenvironment.net

For more information, see Accessing the Kudu service.

Kudu features

Kudu gives you helpful information about your App Service app, such as:

  • App settings
  • Connection strings
  • Environment variables
  • Server variables
  • HTTP headers

It also provides features like these:

  • Run commands in the Kudu console.
  • Download IIS diagnostic dumps or Docker logs.
  • Manage IIS processes and site extensions.
  • Add deployment webhooks for Windows apps.
  • Allow ZIP deployment UI with /ZipDeploy.
  • Generate custom deployment scripts.
  • Allow access with a REST API.

RBAC permissions required to access Kudu

To access Kudu in the browser by using Microsoft Entra authentication, you need to be a member of a built-in or custom role.

If you're using a built-in role, you must be a member of Website Contributor, Contributor, or Owner. If you're using a custom role, you need the resource provider operation: Microsoft.Web/sites/publish/Action.

More resources

Kudu is an open-source project. It has documentation on the Kudu wiki.