Is there any way to assign an name identifier to Firewall IP address entries?

Dom Barnes 11

When I add Firewall exclusions to my Azure SQL Databases, I have options to set a Rule name along with start/end IP addresses. This makes it very useful to identify what an IP address relates to and work out if its still valid or needs to be updated (we allow some exclusions for individuals' home IP's)

Is there any way to do this on Key Vault?

Ben Gimblett 3,410 Reputation points Microsoft Employee

2024-04-09T10:24:30.8533333+00:00

Hi Thanks for the question - if we look beyond the portal to the underlying ARM REST API https://learn.microsoft.com/en-us/rest/api/keyvault/keyvault/vaults/update?view=rest-keyvault-keyvault-2022-07-01&tabs=HTTP#iprule then the Key Vault IP rule is defined as a simple array of [string] values. It's not a key-value-pair dictionary

Hope this helps
Ben Gimblett 3,410 Reputation points Microsoft Employee

2024-04-09T10:26:17.9233333+00:00

An alternative is to turn "off" the public endpoint, use private exclusively - then you could use a VPN (possibly point to site, depending on the number of individuals working from home and corresponding ops effort). This of course also depends on your existing network topology and requirements.
Shweta Mathur 27,691 Reputation points Microsoft Employee

2024-04-15T06:55:06.6966667+00:00

@Dom Barnes Just wanted to check if above information is helped you.
Dom Barnes 11 Reputation points

2024-04-15T13:30:05.74+00:00

@Ben Gimblett thanks for the info. Curious how different teams have implemented this differently then. Shame its not consistent.

We're currently investigating some other issue with private endpoints granting access to AKV so perhaps once thats done I'll investigate this further.