Put cognitive service as service-endpoint in network configuration to restrict access to the given endpoint at a single private network.
Some functionalities are async like recognizeText, and the data can be confidential. Currently they are just protected by a single string in a header http request -> Ocp-Apim-Subscription-Key, it's not sufficient.
Hi Azure customer,
Thank you for reaching out to us. This forum channel is for Azure Machine Learning only, please post your Cognitive Service feedback to the right forum:
Thanks again and sorry for all inconveniences.