
Project Narrative
💉 Building a Secure, Serverless Patient Data Platform on Azure ⚕️
Over the past few weeks I’ve been building a proof-of-concept healthcare patient data platform using Azure Functions and Cosmos DB. Here’s what we’ve accomplished so far:
- 1. Authentication via a custom Azure Function that issues JWTs, backed by Azure Entra ID.
- 2. Create, List, and GetById patient endpoints secured end-to-end with token validation.
- 3. All code under version control and pushed to GitHub over SSH.
Roadblocks We Hit
- • Troubleshooting Azure Functions Core Tools host logs (log-streaming).
- • Configuring Application Insights for remote telemetry queries.
- • GitHub auth hiccups before switching to SSH key-based pushes.
What’s Next
- • Add Update and Delete endpoints.
- • Implement soft-delete / RBAC so clinicians only see their own patients.
- • Build a React front-end (or Power Apps) to consume these APIs.
Security & Compliance Components
- ▪️ Azure Entra ID for identity & token issuance
- ▪️ Azure Key Vault for secrets & connection strings
- ▪️ Application Insights for logs & telemetry
- ▪️ Cosmos DB for encrypted patient records at rest
- ▪️ (Optional) Blob Storage for file attachments
Stay tuned for a walkthrough of the end-to-end demo!