Ensure public network access is disabled for Azure Data Factory

MEDIUM

Description

Allowing unrestricted, public access to cloud services could open an application up to external attack. Disallowing this access is typically considered best practice.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Data factories.
  2. Select the Data factory you wish to edit.
  3. Under Settings, choose Networking.
  4. On the Network access tab set to Private endpoint.
  5. Configure the endpoint on the Private endpoint connections tab as needed.

In Terraform -

  1. In the azurerm_data_factory resource, set public_network_enabled to false.

References:
https://learn.microsoft.com/en-us/azure/data-factory/
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/data_factory#public_network_enabled

Policy Details

Rule Reference ID: AC_AZURE_0261
CSP: Azure
Remediation Available: Yes
Resource Category: Analytics
Resource Type: Data Factory

Frameworks