Want to know the network path between Teams and Azure resources

Question

We are currently designing a system that will integrate Teams in Microsoft365 and App Service on Azure.

There are following two flows, and my question is whether these routes can be stayed within the Microsoft network without going through the internet?

1. make a request to the App Service URL from the Teams tab
2. channel integration between Teams and the Bot Service, accessing the App Service through the Bot Service

If anyone tell me the answer(like sentences in official document), it would be very helpful.

Answer 1

@雄高 下川 , Apologies for the delayed response from over the weekend.

 

As outlined in this Azure doc: Microsoft global network

Yes, any traffic between data centers, within Microsoft Azure or between Microsoft services such as Virtual Machines, Microsoft 365, XBox, SQL DBs, Storage, and virtual networks are routed within our global network and never over the public Internet, to ensure optimal performance and integrity.

The Teams tab and the Bot Service are both part of the Microsoft365 suite, and the App Service is part of the Azure platform.

Checkout the following doc– which shows an example scenario which helps secure the connection to a Microsoft Teams channel bot's web app by using Azure Private Link and Azure Private Endpoint | which is over Microsoft Network

Help secure your Microsoft Teams channel bot and web app behind a firewall

Based on your requirements, you may also use the Azure App Service virtual network integration feature to integrate your app with an Azure virtual network. This will enable your app to access resources in or through the virtual network.

Additionally, you leverage network security groups and user-defined routes to control the inbound and outbound traffic between the App Service and the Teams.
See: Azure App Service virtual network integration