search

microsoft / AzureTRE

An accelerator to help organizations build Trusted Research Environments on Azure.
https://microsoft.github.io/AzureTRE
MIT License
182 stars 139 forks source link

Public network access to the API app service is enabled #3986

Closed jonnyry closed 2 months ago

jonnyry commented 3 months ago

Public network access is enabled to the API app service, even though it has a private endpoint which the app gateway uses (https://microsoft.github.io/AzureTRE/v0.16.0/assets/architecture-azure.png)

public_network_access_enabled is not defined here (and therefore defaults to true):

https://github.com/microsoft/AzureTRE/blob/1ffb09baf37f4599adfd65b4259fdda7564da408/core/terraform/api-webapp.tf#L20

image