Access Public Airlock Storage Accounts through Application Gateway - Githubissues

microsoft / AzureTRE

An accelerator to help organizations build Trusted Research Environments on Azure.

https://microsoft.github.io/AzureTRE

MIT License

185 stars 145 forks source link

Access Public Airlock Storage Accounts through Application Gateway #4150

Open tamirkamara opened 6 days ago

tamirkamara commented 6 days ago

Description

As a TRE Researcher, I want to upload/download airlock files through application gateway, So that URLs used will be the "TRE" ones.

As an administrator / security officer, I want to reduce the number of exposed endpoints in the solution.

Acceptance criteria

[ ] Uploads are done through appgw with existing tools (az cli, storage explorer, etc.)
[ ] Downloads are done through appgw with existing tools (az cli, storage explorer, etc.)
[ ] The application (UI and/or API) is able to provide those "external" links correctly
[ ] If everything works, public access to airlock's external storage accounts need to be blocked