microsoft / microsoft/AzureTRE
Disable public network access for core `stgTREID` storage account
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 235
- Forks
- 192
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 13
Description
As a TRE Administrator I want to disable public network for the stgTREID storage account
So that traffic to this account is routed over private networking instead of the internet and the security posture of this storage account is improved
Since a number of services across the TRE use this account to log data - such as function apps, nexus - an analysis of which services use this account, and ensuring each of these services continue to write to the account over private networking is required.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files or tests. Start by inventorying the TRE services that use the stgTREID storage account, then verify each can write through private networking; done means public network access is disabled and all identified services continue to log successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud, infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100