How can we improve Azure Networking?

Allow a VM's NIC to use a VNET\Subnet from another Subscription

Given that the syntax of json deployment templates allows referencing resources by a unique resourceid which includes the guid of the subscription, I would like to create a VM in subscription 'A', whose NIC references a subnet that is part of a VNET in subscription 'B'.

The reason for this is two-fold:
1) This would allow a corporate networking function to securely manage all the networking infrastructure in a corporate IT-owned and managed subscription, but allow it to be consumed by line-of-business units, whose subscriptions are restricted (via ARM policies) to not allow the creation of VNETs.
2) This would eliminate the need to create a regional VNET (and therefore IP address space) per line-of-business subscription, allowing for sharing of (and therefore more efficient use of) IP address spaces.

Carving up of IP address spaces in a large organisation such as ours presents administrative challenges. It would be far nicer if all Azure networking could be managed centrally and more effectively by the corporate networking function, rather than having to be managed across all subscriptions.

60 votes
Vote
Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)
You have left! (?) (thinking…)
Antony Gibbs shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

1 comment

Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)
Submitting...

Feedback and Knowledge Base