How to purge frontdoor CDN cache content through Azure managementAPI

Narale,Tushar 0

We want to purge azure frontdoor CDN cache from our app service whose whole purporse is to deploy static content to storage account and purge CDN cache that is associated with that storage account.

Previously, this was working fine when CDN we used was Edgio. The app service was given CDN endpoint contributor permissions to Edgio CDN endpoint resource.

After switching to frontdoor CDN, we used below URL to purge frontdoor CDN. However we keep getting 403 error.

https://management.azure.com/subscriptions/${cdnInfo.subscription}/resourceGroups/${cdnInfo.resourceGroup}/providers/Microsoft.Cdn/profiles/${cdnInfo.profile}/afdEndpoints/${cdnInfo.endpoint}/purge?api-version=2023-05-01

We tried giving same permission (CDN endpoint contributor permission) on frontdoor CDN, but that still gives 403 error. Any idea what are we doing wrong here or if Azure frontdoor CDN expects different permissions given to app service in question.

Rohith Vinnakota 2,090 Reputation points Microsoft Vendor

2025-01-20T09:39:36.9566667+00:00
Hi @Narale,Tushar,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you want to purge frontdoor CDN cache content through Azure managementAPI but you're getting 403 error.

Could please try this

https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Cdn/profiles/{profileName}/endpoints/{endpointName}/purge?api-version=2024-02-01

Refer this doc: https://learn.microsoft.com/en-us/rest/api/cdn/endpoints/purge-content?view=rest-cdn-2024-02-01&tabs=HTTP

If above is unclear and/or you are unsure about something add a comment below.

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Regards,

Rohith
Narale,Tushar 0 Reputation points

2025-01-20T13:01:58.6833333+00:00

Hi, we tried your provided URL as well, but no luck. The error we get is 403, which indicates authorization/authentication failed.

Is there specific role need to be assigned to app service so that it can purge frontdoor CDN cache..

Previously we had assigned CDN endpoint Contributor permission to app service under Edgio CDN Endpoint. But now switching to Azure frontdoor CDN cache has resulted in these 403 errors:
Rohith Vinnakota 2,090 Reputation points Microsoft Vendor

2025-01-20T15:19:52.3933333+00:00

Hi @Narale,Tushar,

Thank for reply.

The "AuthorizationFailed" error states that you do not have authorization to perform a purge action on the Front Door endpoint. You should have the following RBAC permission "Microsoft.Network/frontDoors/purge/action" to be able to purge cached content from a Front Door resource.

Refer : https://learn.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftnetwork https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current

Kindly let us know if the above helps or you need further assistance on this issue.

Thank,

Rohith
Rohith Vinnakota 2,090 Reputation points Microsoft Vendor

2025-01-21T13:44:01.58+00:00

Hi @Narale,Tushar,

Greetings!

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

Regards,

Rohith.
Rohith Vinnakota 2,090 Reputation points Microsoft Vendor

2025-01-22T10:27:22.41+00:00

Hi @Narale,Tushar,

Greetings!

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

Regards,

Rohith.

Share via

How to purge frontdoor CDN cache content through Azure managementAPI

Your answer