I'm exploring different Azure options for a migration and have specific needs due to CIS v8 control requirements, particularly for ingress inspection and monitoring. Right now, we're a Windows Server environment, which isn't the best for automation when it comes to managing overhead like patching and support. For an example of our use case, we have Keeper Automator, which needs to run 24/7 listening for requests from our password manager and approving them under certain conditions. It's lightweight and currently operates on an Azure Container App (ACA) with minimal compute resources. However, even with the smallest setup, the costs are higher than expected because it requires an internal load balancer. I'm wondering if an App Service might be a better fit for this situation, but I'm not very familiar with it. Or should I just consider using a B2s VM instead?
3 Answers
Have you thought about a Function App? If your workload fluctuates, the Consumption plan could be a great fit. But if you need it running continuously, I’d recommend the B1 tier on an App Service. It's about $13/month, sturdy enough for your needs, and scalable if you require it in the future. I think the ACA might be overkill for your setup since you don’t seem to need its full capabilities right now. Plus, VMs can get pretty pricey, so I'd steer clear of that option for your use case.
Using App Service sounds like a solid approach for your needs. We run similar lightweight applications, including some marketing sites, on it. However, I do understand your concerns about private networking. If your setup isn't using public IPs and relies on private endpoints, you might still be able to configure an App Service to work with your system, though you'll have to investigate if running it via an App Service Environment (ASE) is necessary, which could get expensive.
The Keeper Automator documentation includes support for both App Services and ACA, so you have flexibility. ACA could feel more tailored to your preferences since it allows for more direct management of the containers. Just keep in mind, for ACA you'll also need to account for the Internal Load Balancer cost if you're going private networking. Compare the ASP P0V3 Linux pricing with ACA options to see what works best for your case.

Related Questions
How to Build a Custom GPT Journalist That Posts Directly to WordPress
Fix Not Being Able To Add New Categories With Intuitive Category Checklist For Wordpress
Get Real User IP Without Installing Cloudflare Apache Module
How to Get Total Line Count In Visual Studio 2013 Without Addons
Install and Configure PhpMyAdmin on Centos 7
How To Setup PostfixAdmin With Dovecot and Postfix Virtual Mailbox