MS Azure | Keyvault and CDN question

Question

Hi Experts,

I want validate couple of things as I am working on implementing some of the audit findings from our azure team.

1. Keyvault that is being used by Azure CDN endpoint can't have IP based whitelisting.
2. We can not have a private endpoint connection between Azure keyvault and Azure CDN endpoint as they are integrated internally in OOTB way.

Let me know your thoughts on this.

Answer 1

Hi @Azure-enthusiast

Thank you for reaching Microsoft Q&A forum!

Let me help you with the information about your ask.

Key Vault that is being used by Azure CDN endpoint can't have IP based whitelisting.

Azure CDN and Key Vault are internally integrated, and Key Vault’s IP-based firewall rules do not apply to Azure services like CDN.

We cannot have a private endpoint connection between Azure key Vault and Azure CDN endpoint as they are integrated internally in OOTB way.

Azure Key Vault and Azure CDN are not support private endpoint connections directly between them. This is because they are integrated in a way that allows them to work together out-of-the-box (OOTB) without requiring additional configurations. If you would like to secure the communication between these services, you might consider using Azure Private Link for Key Vault.

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.