How to mitigate the potential risks associated with the use of Azure REST API in user applications/scripts?

Question

I would like to try Azure REST API to extract and export purview data to satisfy some special user requirements. Could anyone share your assessment of the potential risk level associated with using the Azure/Purview REST API in user applications/scripts? Any recommendations to mitigate these risks would be very much appreciated!

Answer 1

Hello @Peizhu S

Here are some security best practices for using Azure REST API:

• Use secure authentication methods such as Azure Active Directory, Managed Identities, or Service Principals to authenticate your application when calling the Azure REST API
• Limit access to only necessary resources by using Role-Based Access Control (RBAC) and applying the principle of least privilege
• Regularly monitor usage and set up alerts for any unusual activity
• Use secure transfer protocols such as HTTPS to ensure secure communication over the public internet
• Follow secure coding practices and regularly run static code analysis to mitigate code vulnerabilities, code smells, and security bugs
• Keep your Azure resources and applications up to date with the latest security patches and updates

I hope the above practices and links helps you in related to Azure Purview also.