Azure Web PubSub Config Builder

ServerlessAzure

Build Web PubSub hub configs with event handlers, event listeners, Event Hub integration, and network ACLs.

Azure Web PubSub Configuration

Build Web PubSub hub configs with event handlers, event listeners, Event Hub integration, network ACLs, and anonymous connect policies.

Required Fields

nameresourceGroupsku.namehubshubs[0].namehubs[0].properties.eventHandlers

{
  "name": "wps-contoso-prod",
  "resourceGroup": "rg-realtime",
  "location": "eastus2",
  "sku": {
    "name": "Premium_P1",
    "tier": "Premium",
    "capacity": 1
  },
  "tls": {
    "clientCertEnabled": true,
    "minimumTlsVersion": "1.2"
  },
  "publicNetworkAccess": "Enabled",
  "hubs": [
    {
      "name": "collaboration",
      "properties": {
        "eventHandlers": [
          {
            "urlTemplate": "https://func-contoso-wps.azurewebsites.net/runtime/webhooks/webpubsub?code=<key>",
            "userEventPattern": "*",
            "systemEvents": ["connect", "connected", "disconnected"],
            "auth": {
              "type": "ManagedIdentity",
              "managedIdentityResource": "https://func-contoso-wps.azurewebsites.net"
            }
          }
        ],
        "eventListeners": [
          {
            "filter": {
              "type": "EventName",
              "userEventPattern": "document.*",
              "systemEvents": ["connected", "disconnected"]
            },
            "endpoint": {
              "type": "EventHub",
              "eventHubName": "wps-events",
              "fullyQualifiedNamespace": "evhns-contoso-prod.servicebus.windows.net"
            }
          }
        ],
        "anonymousConnectPolicy": "deny"
      }
    },
    {
      "name": "notifications",
      "properties": {
        "eventHandlers": [
          {
            "urlTemplate": "https://func-contoso-wps.azurewebsites.net/runtime/webhooks/webpubsub?code=<key>",
            "userEventPattern": "subscribe,unsubscribe",
            "systemEvents": ["connect", "disconnected"]
          }
        ],
        "anonymousConnectPolicy": "deny"
      }
    }
  ],
  "networkACLs": {
    "defaultAction": "Deny",
    "publicNetwork": {
      "allow": ["ClientConnection"],
      "deny": ["ServerConnection", "RESTAPI"]
    },
    "privateEndpoints": [
      {
        "name": "pe-wps-backend",
        "allow": ["ServerConnection", "RESTAPI"]
      }
    ]
  },
  "identity": {
    "type": "SystemAssigned"
  },
  "tags": {
    "environment": "production",
    "team": "platform"
  }
}

Generated Output

Output will appear here...

How It Helps

Build Web PubSub hub configs with event handlers, event listeners, Event Hub integration, and network ACLs. This tool helps Azure engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.

Things Engineers Ask

Will the output of this Web PubSub config builder pass `az deployment validate` or `terraform validate`?

It produces structurally valid output for the Azure schemas it supports. We still recommend running provider validation locally before applying — schemas evolve and a recently-released property may not yet be reflected. When validation does fail, the error message points at the exact attribute the schema rejected.

Does this Web PubSub config builder consider the RBAC role needed to apply the configuration?

No — generating a Web PubSub configuration is independent of the role required to apply it. Apply the output with a principal that has the documented permissions for that service. For least-privilege scoping, Azure's built-in roles and the Privileged Identity Management 'just enough access' workflows give you a starting point.

Practical Applications

1Designing a Web PubSub configuration for a new Azure workload where the team wants the spec reviewed before any portal click happens.
2Onboarding a new engineer by giving them a Web PubSub sandbox to iterate on without touching live subscriptions.
3Building a Web PubSub reference implementation for a partner integration where you cannot rely on their portal access.
4Sketching a Web PubSub migration from one Azure subscription to another with subscription and resource-group differences called out.

Related Learning Guides

Functions Hosting Plans22 min read
Service Bus vs Event Grid vs Event Hubs24 min read

Was this tool helpful?

Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.