microsoft / microsoft/AzureTRE

Add private endpoint for workspace recovery services vault

Open
#4,944 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
235
Forks
192
Avg merge
1d 23h
Merged PRs (30d)
13

Description

The recovery services vault introduced in PR https://github.com/microsoft/AzureTRE/pull/4555 does not have a private endpoint, and is currently has public_network_access_enabled set to true (by default).

A private endpoint should be added to the workspace VNET, and public_network_access_enabled set to false to bring this resource in line with others in the workspace.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the recovery services vault implementation introduced in PR #4555 and trace how the workspace VNET is configured. Verify that the vault has a private endpoint in that VNET and that public_network_access_enabled is disabled; done means the vault no longer relies on public network access.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, infrastructure, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.