I would like to block remote access, allowing only the App Services in the same subscription to access my storage in production.
I tried using Virtual Network and Access control (IAM) but without success.
Asked
Active
Viewed 1,150 times
1 Answers
0
In Azure Web Apps configure VNet Integration for the Vnet you like to configure Azure Storage. Then configure the storage account to Access only from specific network (Firewall and Networking) you specified in the Azure App Service. Then Configure that VNet with Service Endpoints to Azure Storage.
-
So do I need to set up a Firewall even to only on Azure? I checked the pricing and to add a firewall this will cost me +- $900/month – Fernando Magno Jul 10 '19 at 09:48
-
No need of using Azure firewall in here what i mentioned was firewall and networking feature in storage account. – Kasun Raditha Rajapakse Jul 10 '19 at 10:47
-
I showed the case to a customer engineer at Microsoft, he couldn't figure out at the call. I am waiting for their response. – Fernando Magno Jul 12 '19 at 18:16