Hello, I am doing risk evaluation for azure machine learning security for my project. I would like to learn more about how azure protect my data. Please share details like Which data store in where if I use vnet?

Question

Hello, I am doing risk evaluation for azure machine learning security for my project. I would like to learn more about how azure protect my data. Please share details like Which data store in where if I use vnet?

Answer 1

Hello @Benitez Gaucho

Thanks for reaching out to us, please refer to this document for your reference -

https://learn.microsoft.com/en-us/azure/machine-learning/how-to-secure-workspace-vnet?view=azureml-api-2&tabs=required%2Cpe%2Ccli

Azure Machine Learning uses multiple storage accounts. Each stores different data, and has a different purpose:

Your storage: The Azure Storage Account(s) in your Azure subscription are used to store your data and artifacts such as models, training data, training logs, and Python scripts. For example, the default storage account for your workspace is in your subscription. The Azure Machine Learning compute instance and compute clusters access file and blob data in this storage over ports 445 (SMB) and 443 (HTTPS).

When using a compute instance or compute cluster, your storage account is mounted as a file share using the SMB protocol. The compute instance and cluster use this file share to store the data, models, Jupyter notebooks, datasets, etc. The compute instance and cluster use the private endpoint when accessing the storage account.

Microsoft storage: The Azure Machine Learning compute instance and compute clusters rely on Azure Batch, and access storage located in a Microsoft subscription. This storage is used only for the management of the compute instance/cluster. None of your data is stored here. The compute instance and compute cluster access the blob, table, and queue data in this storage, using port 443 (HTTPS).

Machine Learning also stores metadata in an Azure Cosmos DB instance. By default, this instance is hosted in a Microsoft subscription and managed by Microsoft. You can optionally use an Azure Cosmos DB instance in your Azure subscription. For more information, see Data encryption with Azure Machine Learning.

Also, this guidance provide you more information about how to access workspace from studio -

https://learn.microsoft.com/en-us/azure/machine-learning/concept-secure-network-traffic-flow?view=azureml-api-2#scenario-access-workspace-from-studio

I hope this helps. Let me know if you have any questions.

Regards,

Yutong

-Please kindly accept the answer and 'vote' Yes if you feel helpful to support the community, thanks a lot.