Azure Security Announcements - September 9th 2022

September 12, 2022

This week, there are 3 announcements related to Azure Security.

⁠Headlines:

  • Resource instance rules enable secure connectivity to a storage account by restricting access to specific resources of select Azure services
  • You can now use Stream Analytics clusters to securely connect your jobs to write to dedicated synapse SQL pools using managed private endpoints
  • Stream Analytics allows you to use managed identities as an authentication mode when connecting to Azure Service Bus queues and topics

All details below.

Azure Storage

New Features
Resource instance rules enable secure connectivity to a storage account by restricting access to specific resources of select Azure services.

Azure Storage provides a layered security model that enables you to secure and control access to your storage account. You can configure network access rules to limit access to your storage account from select virtual networks or IP address ranges. Some Azure services operate on multi-tenant infrastructure, so resources of these services cannot be isolated to a specific virtual network.

With resource instance rules, you can now configure your storage account to only allow access from specific resource instances of such Azure services. For example, Azure Synapse offers analytic capabilities that cannot be deployed into a virtual network. If your Synapse workspace uses such capabilities, you can configure a resource instance rule on a secured storage account to only allow traffic from that Synapse workspace.

Resource instances must be in the same tenant as your storage account, but they may belong to any resource group or subscription in the tenant.

Announcement | Documentation

Azure Stream Analytics

New Features
You can now use Stream Analytics clusters to securely connect your jobs to write to dedicated synapse SQL pools using managed private endpoints. Setting this up is a simple, two step operation. First add synapse SQL output to your job. Then go to your Stream Analytics cluster to add a managed private endpoint that establishes a secure, private connection between your resources.

Announcement | Documentation

New Features
Stream Analytics allows you to use managed identities as an authentication mode when connecting to Azure Service Bus queues and topics. This solves a common challenge when building cloud applications related to credential management. Keeping the credentials secure is important and shouldn't be stored in developer workstations or checked into source control.

Announcement | Documentation

Recommended content

Comments

Leave your comment