Details about security options with Logic Apps "export to PowerApps" option

epress 0 Reputation points
2024-04-23T15:37:11.4466667+00:00

After reading about securing a Logic App (including options for Azure Active Directory authorization policies and API Management), how secure is the "export to PowerApps" option in Logic Apps? It creates a custom connector that appears to use "OpenAPIconnection" as they type, but I can't see any information about the authentication model it uses.

My use case requires that the Logic App can only be triggered by a call from a PowerApp (through Power Automate) to allow end-users to trigger the logic app through a friendly front-end. I'm concerned the logs or flow run history will contain the Logic App SAS value, API key or other confidential values.

I'm also concerned that if I lock down the Logic App using the AAD authorization policies, API Management, or restrict IP addresses, the "export to PowerApps" custom connection it creates will stop working.

Is there any information about the behind the scenes for this connector? Or have experience implementing it securely?

A lot of the information is about calling Logic Apps from Postman or other more 'codey' end-clients, but PowerApps/PowerAutomate is a bit more limited

Thanks in advance

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
2,855 questions
0 comments No comments
{count} votes