Selective access to/from workspace by external services

Description

We have two use-cases that require selective access through the workspace firewall:

• one use-case requires outbound connectivity to a single, fixed IP
• several use-cases require inbound access from an Azure Data Factory to push data into a MySQL service within the workspace. In most cases, that access will be one-off, at project setup. In others, it may be required for periodic refreshes of data.

Before I go hacking around myself, I'd like to know if there are any guidelines on how I can do this cleanly, such that it can be turned on/off on a per-workspace basis. Do I need to customise templates, or is 'manually' modifying the w/s network the best way to go?

Thanks in advance for any suggestions.

The issue names no files, tests, or entry points. Start by reviewing the workspace firewall and network configuration, then investigate how Azure Data Factory could reach MySQL and how outbound access to a fixed IP could be enabled per workspace. Done would require a documented, supported way to turn these access paths on and off without manually modifying a workspace.