MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.3k stars 21.48k forks source link

Update concept-dev-box-network-requirements.md #124888

Open ri-we opened 3 days ago

ri-we commented 3 days ago

The recommendation, of using the service tag AzureCloud do not make any sense from a security perspective. Allowing all IP's in Azure? It's includes also the hackers IP. The service tag Internet can't be used on the firewall.

prmerger-automator[bot] commented 3 days ago

@ri-we : Thanks for your contribution! The author(s) have been notified to review your proposed change.

learn-build-service-prod[bot] commented 3 days ago

Learn Build status updates of commit 5c6f542:

:white_check_mark: Validation status: passed

File Status Preview URL Details
articles/dev-box/concept-dev-box-network-requirements.md :white_check_mark:Succeeded

For more details, please refer to the build report.

For any questions, please:

Court72 commented 2 days ago

@RoseHJM

Can you review the proposed changes?

Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

label:"aq-pr-triaged"

@MicrosoftDocs/public-repo-pr-review-team

RoseHJM commented 2 days ago

Hi @ri-we, thank you for your comments. I will consult with the product group and make the appropriate updates.

ri-we commented 2 days ago

Hello @RoseHJM, thanks. This isn't the only Microsoft product documentation that uses overly broad service tags. These tags don't align with the Secure Future Initiative. Why aren't there more product-specific service tags or FQDN tags, or even a Microsoft namespace that isn't shared with Azure, like the new Microsoft Defender for Endpoint URLs (e.g., *.endpoint.security.microsoft.com)?