Open azure automation account only to monitor log alert rule

Copper Contributor

Hello,

I have an automation account with a runbook and a webhook. I activate it using azure monitor log alert rule.

My concern is the webhook which is publicly accessible to anyone. To fix this breach I'm trying to isolate the automation account so I blocked public network access but it blocks all communication including the monitor alerts. I know you can connect to it using a private endpoint but I cant find a way to use it with monitor since its not under a Vnet I can see or access.

Am I missing something? Is there another way of opening connection only to the azure monitor alerts?

Maybe some other way of isolating the automation account or securing the webhook?

Thanks!

0 Replies