Forum Discussion
Azure traffic to storage account
Hello, I’ve set up a storage account in Tenant A, located in the AUEast region, with public access. I also created a VM in Tenant B, in the same region (AUEast). I’m able to use IP whitelisting ...
How about this:
- Use Virtual Network (VNet) Rules
- Link the storage account to a VNet
- Use Service Endpoints or Private Endpoints
- This ensures traffic is controlled at the network level, not just IP level
- Use Private Endpoints for Cross-Tenant Access
- You can set up a Private Endpoint in Tenant B that connects to the storage account in Tenant A
- This gives you full control over access and visibility