The ARM template for the EventHubForwarder is currently missing some important security settings that expose our integration. Enabling them has been verified to not affect the normal operation of this log forwarding solution. These are:
Disabling the public network access to the Storage account.
Disabling public access to the blobs/containers in the Storage account.
Disabling FTP access to the Function App.
Enforcing HTTPS to the Function App.
Disabling the public network access to the Function App.
This PR disables/enables these security settings. Please note that the publicNetworkAccess setting of the StorageAccount is currently being ignored by Azure, as mentioned in this GH issue. Therefore, the user of this function will need to manually set it to "Disabled" once the StorageAccount has been created, here:
The ARM template for the EventHubForwarder is currently missing some important security settings that expose our integration. Enabling them has been verified to not affect the normal operation of this log forwarding solution. These are:
This PR disables/enables these security settings. Please note that the publicNetworkAccess setting of the StorageAccount is currently being ignored by Azure, as mentioned in this GH issue. Therefore, the user of this function will need to manually set it to "Disabled" once the StorageAccount has been created, here: