Allow Azure Batch to access a locked down Storage Account

Currently when using a storage account for persisting job output this storage account can not be locked down by using the Firewall and/or Private Endpoint/VNET service endpoint. Therefore the security of the data depends solely on the secrecy of the access keys.If Azure Batch would have VNET integration or similar capability we would be able to add an additional layer of security. An alternative would be if Azure Batch is a 'trusted service' for the storage account. (https://docs.microsoft.com/en-in/azure/storage/common/storage-network-security#trusted-microsoft-services)

All Ideas

0 Comments

You must to comment