Kudu service overview

Kudu is the engine behind some features in Azure App Service that are related to source-control-based deployment and other deployment methods, like Dropbox and OneDrive sync.

Anytime you create an app, App Service creates a companion app for it that's secured by HTTPS. This Kudu app is accessible at these URLs:

• App not in the Isolated tier: https://<app-name>.scm.chinacloudsites.cn
• Internet-facing app in the Isolated tier (App Service Environment): https://<app-name>.scm.<ase-name>.p.chinacloudsites.cn
• Internal app in the Isolated tier (App Service Environment for internal load balancing): https://<app-name>.scm.<ase-name>.appserviceenvironment.cn

For more information, see Accessing the Kudu service.

Kudu gives you helpful information about your App Service app, such as:

• App settings
• Connection strings
• Environment variables
• Server variables
• HTTP headers

It also provides features like these:

• Run commands in the Kudu console.
• Download IIS diagnostic dumps or Docker logs.
• Manage IIS processes and site extensions.
• Add deployment webhooks for Windows apps.
• Allow ZIP deployment UI with /ZipDeploy.
• Generate custom deployment scripts.
• Allow access with a REST API.

To access Kudu in the browser by using Microsoft Entra authentication, you need to be a member of a built-in or custom role.

If you're using a built-in role, you must be a member of Website Contributor, Contributor, or Owner. If you're using a custom role, you need the resource provider operation: Microsoft.Web/sites/publish/Action.

Kudu is an open-source project. It has documentation on the Kudu wiki.