Describe Container Apps Security & Hardening

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure

https://docs.microsoft.com/azure

Creative Commons Attribution 4.0 International

10.21k stars 21.36k forks source link

Open ezYakaEagle442 opened 2 years ago

ezYakaEagle442 commented 2 years ago

Describe Container Apps Security & Hardening :

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

RyanHill-MSFT commented 2 years ago

Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

veikkoeeva commented 2 years ago

The linked issues have good questions.

I would say a simple example using Bicep with VNET, subnets for frontend and backend, NSGs, service endpoints and such would go some way too.

I'll cross-reference https://github.com/microsoft/azure-container-apps/issues/320 as I believe it goes into documentation and hardering questions I too am thinking.

trylvis commented 7 months ago

+100 to adding equivalent to Kubernetes Network Policies.

We should on a Container App level be able to define what Container Apps can connect to it.

Especially as Container App Environment grows, not being able to control this is not optimal from a security point of view.

F.x. Container App A only allows connection from Container App B, and no other Container Apps.

adrianhall commented 4 months ago

@RyanHill-MSFT - please remove static-web-apps/svc (and craig) from this issue as it is for ACA, not SWA.