Allow access to Azure Service Bus namespace from specific IP addresses or ranges

URL: https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-ip-filtering
Author: spelluru

Summary

How to use Firewall Rules to allow connections from specific IP addresses to Azure Service Bus.

Highlights Added July 17, 2024 at 11:02 AM

By default, Service Bus namespaces are accessible from internet as long as the request comes with valid authentication and authorization. With IP firewall, you can restrict it further to only a set of IPv4 addresses or IPv4 address ranges in CIDR (Classless Inter-Domain Routing) notation. ([View Highlight] (https://read.readwise.io/read/01gz2qefghp4xfxqvq4bape2ny))

Firewalls and Virtual Networks are supported only in the premium tier of Service Bus. If upgrading to the premier tier isn't an option, we recommend that you keep the Shared Access Signature (SAS) token secure and share with only authorized users. For information about SAS authentication, see Authentication and authorization. ([View Highlight] (https://read.readwise.io/read/01gz2qdhpykkk4vjwe5vnp8n73))