Difference between recovery service vault using public access and private access

Question

I tried using creating a recovery service vault using both methods, public and private access with no private endpoints. I can restore the same way in the portal. How can I demonstrate the difference in access type?

Answer 1

Hello Martin Thong

To demonstrate the difference in access types for a Recovery Service Vault (RSV), you can follow the steps below:

1. Create a new RSV in the Azure portal using the Private access type.
2. Navigate to the Access control (IAM) tab for the RSV and add a new role assignment for a user or group that has access to the subscription but not to the virtual network where the RSV is located. Assign the "Contributor" role to this user or group.
3. Try to restore a backup from the RSV using the Azure portal. You should not be able to restore the backup as the user or group you assigned the "Contributor" role to does not have access to the virtual network where the RSV is located.
4. Delete the RSV that was created in step 1.
5. Create a new RSV in the Azure portal using the Public access type.
6. Repeat steps 2 and 3. You should be able to restore the backup as the RSV can be accessed publicly and does not require access to the virtual network. By demonstrating the difference between the two access types in this way, you can show the importance of using private access for RSVs that contain sensitive data and should only be accessible from within a specific virtual network.

Please accept answer and upvote if the above information is helpful for the benefit of the community.