Azure Logic Apps

Azure Logic Apps is Microsoft's no-code/low-code workflow automation platform — 400+ built-in connectors for Azure services, Office 365, Salesforce, SAP, and more, with visual workflow design in the Azure Portal. For agents: the ARM API creates and manages Logic App workflows, triggers workflow runs, and queries run history. The HTTP trigger enables agent-invocable workflows (POST to trigger URL → workflow executes → returns result). Consumption plan is event-driven serverless; Standard plan provides dedicated compute for higher throughput. Confidence is docs-derived.

ARM REST API at management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Logic. PUT /workflows/{name} creates workflow (ARM JSON definition with triggers + actions). GET /workflows/{name} retrieves workflow. GET /workflows/{name}/runs lists workflow runs. GET /workflows/{name}/runs/{run_name} retrieves run details. GET /workflows/{name}/triggers/{trigger_name}/listCallbackUrl retrieves HTTP trigger URL. POST to HTTP trigger URL invokes workflow externally. POST /workflows/{name}/triggers/{name}/run triggers callback-based workflow. GET /workflows/{name}/runs/{run_name}/actions/{action_name} retrieves action output. Azure CLI: az logic workflow trigger run --resource-group --name --trigger-name.

Managed Identity (recommended): DefaultAzureCredential() for ARM API access. ARM RBAC: roles/Logic App Contributor for workflow management. HTTPS enforced. HTTP trigger: optional caller authentication (Azure AD, SAS key, IP filtering). No OAuth2. Workflow identity: Logic App can use Managed Identity to authenticate to other Azure services (no stored credentials in workflow). SAS key: simple HMAC token in trigger URL — rotate periodically.

ARM API: async operations for workflow creation (LRO). HTTP trigger: synchronous request/response or async (202 + polling) depending on workflow. Trigger URL: contains SAS token — treat as secret, regenerate on compromise. Consumption plan billing: per action execution (4000/month free). Standard plan: dedicated instance — no per-action billing. Logic Apps uptime at status.azure.com. Workflow validation: ARM template validation at deploy time catches config errors. Connector throttling: some connectors have per-connection rate limits (e.g., O365 5000 calls/day).

learn.microsoft.com/azure/logic-apps covers workflow design, connector reference, ARM template documentation, and trigger/action reference. Getting started: Azure free account, create Logic App via Portal, get trigger URL — first workflow triggered in under 10 minutes. Terraform: azurerm_logic_app_workflow. Azure CLI: az logic. Community via Microsoft Q&A and Stack Overflow (azure-logic-apps tag). Comprehensive documentation; visual designer reduces need for ARM template authoring.