Azure

App Service vs Container Apps vs Functions: Azure Compute Selection Guide

2026-05-24
NicheeLab Editorial Team

Azure offers four main options for application hosting: App Service, Container Apps, Functions, and AKS. Each has a different sweet spot, cost structure, and operational load, and picking the wrong one leads directly to over-spending or operational pain. This article lays out the full landscape of Azure compute services — from the traditional PaaS to the latest serverless options — and the criteria for choosing between them.

Side-by-Side Comparison of All 4 Services

ItemApp ServiceContainer AppsFunctionsAKS
CategoryTraditional PaaSServerless KubernetesServerless function runtimeManaged Kubernetes
Deployment unitCode / ContainerContainerFunction (Code / Container)Container
Scale to ZeroNoYesYes (Consumption)No (possible via KEDA)
Max execution timeUnlimitedUnlimited10 min (Consumption) / 60 min (Premium)Unlimited
VNet IntegrationS1+ supportedBuilt-inPremium / Flex ConsumptionBuilt-in
Operational loadLowLowLowestHigh
Typical cost (mid-size)JPY 40-50K/moJPY 10-30K/moJPY 5-20K/moJPY 60-90K/mo
Use caseTraditional web appsMicroservices / new container workloadsShort event-driven processingFull Kubernetes required

App Service in Detail

App Service is Azure's most mature PaaS with the deepest operational know-how, ideal for hosting traditional web apps and APIs. It supports both Windows and Linux and can deploy from either code or container images.

Main Tiers

  • Free / Shared / Basic (B1-B3): Dev and test only, no Always On
  • Standard (S1-S3): Minimum for production: Auto Scale (10-instance cap), custom domains, SSL
  • Premium v3 (P0v3-P5v3): Recommended for production: Auto Scale up to 30 instances, VNet Integration, Premium Storage, latest-generation CPUs
  • Isolated v2 (I1v2-I6v2): Based on App Service Environment v3 (ASEv3) with a dedicated VNet for compliance workloads, starting from hundreds of thousands of yen per month

For typical production web apps, start at Premium v3 P1v3. Reserve ASEv3 for compliance scenarios (PCI DSS, GDPR data residency, financial institutions).

Container Apps in Detail

Container Apps is a Serverless Kubernetes-based PaaS that went GA in 2022. Under the hood it runs on AKS, but you configure it declaratively with ARM/Bicep without touching Kubernetes YAML.

Key Features

  • Scale to Zero: Zero instances and zero cost when idle
  • KEDA event-driven scaling: 50+ scalers including HTTP, Queue, Event Hub, Service Bus, Kafka, and Cron
  • Dapr integration: Common API for inter-service communication, pub/sub, and state stores
  • Revisions: Blue-green and canary deployments
  • Traffic Splitting: Split traffic across multiple revisions for A/B testing
  • Built-in Managed Identity support
  • VNet Integration: Internal/External Endpoint and Private Endpoint support

It is the go-to service when you want to run containers without taking on the AKS operational burden.

Functions in Detail

Functions is an event-driven serverless runtime. It is triggered by HTTP, Timer, Queue, Blob, Event Hub, Service Bus, or Cosmos DB events and runs at the function level.

Hosting Plans

PlanHighlightsUse case
ConsumptionFully serverless, free up to 1M executions + 400K GB-seconds/month, 10-min cap, Cold Starts of a few secondsSimple, lightweight workloads
PremiumVNet Integration, Always On, 60-min execution, dedicated instancesLow-latency requirements
App Service PlanCo-locate on an existing plan to cut costsShared with other apps
Flex Consumption (GA 2024, new default)Evolution of Consumption with VNet Integration, instance-count control, and configurable Always ReadyMainstream choice for new projects

When to Choose AKS Instead

Pick AKS only when you genuinely need a full Kubernetes environment. Specifically:

  • Running on vendor-neutral OSS Kubernetes (multi-cloud strategy)
  • Significant existing Helm Chart / Kustomize assets
  • Advanced K8s features like Service Mesh (Istio)
  • Custom node pools such as GPU nodes or Spot nodes
  • Complex stateful workloads using StatefulSet

For anything else where you just want to "run containers," Container Apps is enough and lets you skip the AKS operational burden (upgrades, networking, storage design, security patching). Microsoft itself recommends "start with Container Apps, choose AKS only when Kubernetes-specific features are required" for new projects.

Cost Comparison

Monthly cost estimates for representative production setups in the Tokyo region:

ServiceExample configurationMonthly estimate
App ServiceP1v3 (210 ACU, 3.5 GB RAM) x 2 instances HAJPY 40-50K
Container Apps1 container (0.5 vCPU, 1 GiB) x 1 replica + on-demand scalingJPY 10-30K (much less with Scale to Zero)
Functions Consumption5M executions + 1M GB-seconds/monthJPY 2,000-5,000
Functions Premium EP1Fixed 1 vCPU + usageJPY 16,000 base + usage
AKSStandard control plane + D4s_v5 x 3 nodesJPY 60-90K + LB

Cost order: Functions Consumption << Container Apps (Scale to Zero) <= Functions Premium <= App Service <= AKS. The simpler the app, the more dramatic the cost savings from Scale to Zero on Functions or Container Apps.

Recommended Patterns for New Builds

ScenarioRecommended serviceWhy
Simple CRUD web appApp Service Premium v3Deep operational know-how, PaaS reliability
Microservices / new container workloadsContainer AppsScale to Zero + KEDA + Dapr
Serverless API (low traffic)Functions ConsumptionRuns for a few thousand yen/month
Serverless API (low-latency)Functions Flex ConsumptionNo Cold Start + low cost
Full Kubernetes requiredAKSK8s-specific features, multi-cloud
Legacy .NET / Java EEApp Service Linux Premium v3Lift & Shift of existing assets

Related Certifications

Frequently Asked Questions

How do I choose between App Service, Container Apps, and Functions?

App Service is the traditional PaaS focused on web apps and APIs, supports Windows/Linux, uses plan-based fixed scaling, and offers a fully managed OS — the most mature option with the deepest operational know-how. Container Apps (GA 2022) is a serverless Kubernetes-based PaaS that deploys directly from container images and supports Scale to Zero plus KEDA event-driven scaling — the go-to choice when you want containers without the AKS operational burden. Functions is an event-driven serverless runtime triggered by HTTP, Timer, Queue, Blob, Event Hub, Service Bus, or Cosmos DB, with a per-function limit of 10 minutes (Consumption) or 60 minutes (Premium), ideal for short event processing. Rule of thumb: traditional web app → App Service, container-based greenfield → Container Apps, event-driven short tasks → Functions, full-control Kubernetes → AKS.

What are the App Service Plan tiers?

Main App Service Plan tiers: Free / Shared / Basic (B1-B3) for dev and test, no Always On. Standard (S1-S3) is the minimum for production, with Auto Scale (10-instance cap), custom domains, and SSL. Premium v3 (P0v3-P5v3) is the recommended production tier, with Auto Scale up to 30 instances, VNet Integration, Premium Storage, and the latest-generation CPUs. Isolated v2 (I1v2-I6v2) runs on App Service Environment v3 (ASEv3) with a dedicated VNet for compliance workloads, starting from hundreds of thousands of yen per month. For typical production web apps, start at Premium v3 P1v3; reserve ASEv3 for compliance scenarios (PCI DSS, GDPR data residency, financial institutions). Linux and Windows have nearly identical tier structures, with small feature differences (e.g., Docker-supported features).

What makes Container Apps distinctive?

Key Container Apps features: 1) Scale to Zero (zero instances when idle for zero cost), 2) KEDA event-driven scaling (50+ scalers including HTTP, Queue, Event Hub, Service Bus, Kafka, and Cron), 3) Dapr integration (Distributed Application Runtime providing a common API for inter-service communication, pub/sub, and state stores), 4) Revisions (blue-green and canary deployments), 5) Traffic Splitting across multiple revisions for A/B testing, 6) built-in Managed Identity support, and 7) VNet Integration with Internal/External Endpoint and Private Endpoint support. Under the hood it runs on AKS, but you configure it declaratively with ARM/Bicep without touching Kubernetes YAML. It is the go-to service when you want to run containers without taking on AKS operations.

What are the Functions hosting plans?

Main Functions plans: Consumption Plan — fully serverless, pay-per-execution (free up to 1M executions + 400K GB-seconds per month), 10-minute execution cap, and Cold Starts of a few seconds. Premium Plan — VNet Integration, Always On (no Cold Start), 60-minute execution cap, dedicated instances, monthly base fee plus usage. App Service Plan — share an existing plan to cut costs by co-locating Functions with other apps, with some scaling constraints. Flex Consumption Plan (GA 2024, the new recommended default) — an evolution of Consumption with VNet Integration, instance-count control, and configurable Always Ready Instances. Pick Consumption for simple lightweight workloads, Premium or Flex Consumption when you need low latency, and an App Service Plan for cost optimization through co-location. Flex Consumption is increasingly the default for new projects.

How do the costs compare?

Monthly cost estimates for representative production setups in the Tokyo region. App Service: P1v3 (210 ACU, 3.5 GB RAM) x 2 instances for HA = JPY 40,000-50,000/month. Container Apps: 1 container (0.5 vCPU, 1 GiB RAM) x 1 replica always-on plus on-demand scaling = JPY 10,000-30,000/month (drops sharply with Scale to Zero). Functions: Consumption (5M executions + 1M GB-seconds/month) = JPY 2,000-5,000/month; Premium EP1 = JPY 16,000/month base plus usage. AKS: free Standard control plane + D4s_v5 x 3 nodes = JPY 60,000-90,000/month plus load balancer. Cost order: Functions Consumption << Container Apps (Scale to Zero) <= Functions Premium <= App Service <= AKS. The simpler the app, the more dramatic the savings from Scale to Zero on Functions or Container Apps.

When should I choose AKS instead?

Pick AKS only when you genuinely need a full Kubernetes environment. Specifically: 1) running on vendor-neutral OSS Kubernetes (multi-cloud strategy), 2) significant existing Helm Chart / Kustomize assets, 3) advanced K8s features like Service Mesh (Istio), 4) custom node pools such as GPU nodes or Spot nodes, or 5) complex stateful workloads using StatefulSet. If you just want to run containers, Container Apps is enough and lets you skip the AKS operational burden (upgrades, networking, storage design, security patching). Microsoft itself recommends "start with Container Apps, choose AKS only when you need Kubernetes-specific features" for new projects.

What is the best choice for a new web app build?

Recommendations by scenario: 1) Simple CRUD web app (Node.js / Python / .NET) → App Service Premium v3 (deep operational know-how, PaaS reliability). 2) Microservices or container-based greenfield → Container Apps (Scale to Zero + KEDA + Dapr). 3) Serverless API with low traffic → Functions Consumption (a few thousand yen per month). 4) Serverless API with low-latency requirements → Functions Flex Consumption. 5) Full Kubernetes required → AKS. The industry pattern for new web development is converging on three pillars: App Service for stateful or complex requirements, Container Apps for stateless microservices, and Functions for short event-driven processing.

Which related certification exams cover this?

AZ-204 (Developer Associate, scheduled for retirement in July 2026) tests the choice between App Service, Functions, and Container Apps in depth in Domain 1 (Compute, 25-30%). AZ-104 (Administrator) Domain 3 covers operational selection, AZ-305 (Solutions Architect Expert) Domain 4 covers architect-level selection, and AZ-400 (DevOps Engineer Expert) covers CI/CD pipeline construction. Pairing these with non-Microsoft certifications like AWS Solutions Architect Professional and GCP Professional Cloud Architect demonstrates multi-cloud capability that is highly valued in the job market.

Related Articles & Technical Deep Dives

Azure Managed Identity vs Service Principal 完全比較|認証パターンの選定と実装ベストプラクティス【2026 年版】

Azure の認証エンティティ Managed Identity と Service Principal を完全比較。System-assigned / User-assigned の使い分け、Client Secret vs Certificate vs Workload Identity Federation の選定、AKS Workload Identity、Azure サービス対応状況、関連認定試験 (SC-300 / AZ-204 / AZ-400) を日本語で網羅。実装パターン集付き。

Azure Kubernetes Service (AKS) 入門ガイド|アーキテクチャ・Networking・Ingress・セキュリティ完全解説【2026 年版】

Azure Kubernetes Service (AKS) の入門ガイド。Control Plane と Node Pool の構造、Azure CNI Overlay vs Kubenet の選定、Application Gateway / NGINX Ingress 選定、Workload Identity (新方式)、Private Cluster・Microsoft Defender for Containers・Azure Policy のセキュリティ、関連認定試験 (AZ-104 / AZ-204 / AZ-400 / CKA) を日本語で網羅。

AZ-104 vs AZ-204 完全比較|Microsoft Azure Administrator vs Developer Associate の違いと選び方【2026 年版】

Microsoft Azure の 2 大 Associate 認定 AZ-104 (Administrator) と AZ-204 (Developer) を完全比較。対象ロール・出題範囲・難易度・学習時間・受験料・キャリアパスを表形式で整理。AZ-204 2026 年 7 月リタイア後の判断材料、両方取る価値、次の認定への進路まで日本語で網羅。

AZ-204 完全ガイド|Microsoft Azure Developer Associate【2026 年 7 月リタイア注意】

Microsoft Azure Developer Associate (AZ-204) の完全ガイド。5 ドメインの出題範囲、App Service / Functions / Cosmos DB SDK / Service Bus などの開発者向け機能、2026 年 7 月 31 日のリタイア対応戦略、AZ-104 / AZ-400 / AI-103 への代替ルート、駆け込み受験の判断材料を日本語で網羅。

Technical information in this article is based on the Azure App Service Documentation, Azure Container Apps Documentation, and Azure Functions Documentation. This article is not an official Microsoft Corporation product and has no partnership or sponsorship relationship. Microsoft and Azure are trademarks of the Microsoft group of companies. Information is based on publicly available official materials as of May 24, 2026. Always verify the latest information on the official pages.

Check what you learned with practice questions

Practice with certification-focused question sets

View Azure exam prep page
Author

NicheeLab Editorial Team

NicheeLab editorial team focused on data engineering and cloud certification learning. Content is structured around practical study needs and official exam domains.


Related articles
Azure

AZ-900 Azure Fundamentals: Complete Exam Guide (2026)

Pass AZ-900 — cloud concepts, Azure architecture, management...

Azure

Azure Certification Roadmap: Which Cert to Take Next (2026)

Choose your Azure certification path — Fundamentals, Associa...

Azure

AI-901 Azure AI Fundamentals (Beta): Complete Guide (2026)

Pass AI-901 — Microsoft Foundry, generative AI, responsible ...

Azure

Microsoft Entra ID Fundamentals for Azure Certs (2026)

Entra ID basics every cert candidate needs — tenants, identi...

Azure

DP-900 Azure Data Fundamentals: Complete Guide (2026)

Pass DP-900 — relational, non-relational, analytics, Power B...

Browse all Azure articles (104)
© 2026 NicheeLab All rights reserved.