Giving conditional access to resources

Nisarg Chauhan 0

Hello guys, I want to know how can i set the access of Azure resources(Database, storage account, web app, etc.)in such a way that when the user is connected to any kind of public network they can not access those resources and when they are connected to the private network they can access those resources?

Marcin Policht 10,675 Reputation points MVP

2024-03-20T00:56:44.0033333+00:00

Yes - use private endpoints and block access to these resources from the Internet.

More at https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview

hth
Marcin
Nisarg Chauhan 0 Reputation points

2024-03-22T21:23:39.83+00:00

Thank you for your help.

let's say I want to access resources like databases, file shares, etc. when I am only connected to private networks. let's say these private networks can be my home network or my friend's home network. but I don't want to access those resources when I am connected to any public network for example, Starbucks open a public network. so instead of defining endpoints I just want to put the range of private networks. can I do that?
GitaraniSharma-MSFT 47,421 Reputation points Microsoft Employee

2024-03-28T11:08:27.2733333+00:00

@Nisarg Chauhan , if you want to restrict access to your storage or database accounts through the private endpoint only, you can configure the storage/database firewall to deny or control access through the public endpoint.

You can secure your storage/database account to only accept connections from your VNet by configuring the storage/database firewall to deny access through its public endpoint by default.

Refer: https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

https://learn.microsoft.com/en-us/azure/azure-sql/database/private-endpoint-overview?view=azuresql#disable-public-access-to-your-logical-server

Regards,

Gita
GitaraniSharma-MSFT 47,421 Reputation points Microsoft Employee

2024-04-02T17:00:45.8266667+00:00

@Nisarg Chauhan , Could you please provide an update on this post?

Kindly let us know if the above helps or you need further assistance on this issue.

1 answer

Marcin Policht 10,675 Reputation points MVP

2024-04-02T21:16:06.7366667+00:00

Yes - as long as you provide connectivity to target resources via private endpoint (within an Azure virtual network). You can connect to that virtual network from your computer via point-to-site VPN

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Please sign in to rate this answer.

0 comments No comments
Sign in to comment