Is it really necessary a https endpoint for Azure Event Grid even if my endpoint is a VM inside Azure?

Question

Hi there,

I have an API (uvicorn) running as a 'webhook' in an Azure VM. I am trying to use 'Azure Event Grid' to route Blob storage events to this API. Do I really need to obtain a SSL certificate and cofigure uvicorn to use the certificate in order to make it work? Does Event Grid really need a https endpoint even if this endpoint is a VM inside Azure?

Answer 1

Hello @Roberto Araujo Filho,

welcome to this moderated Azure community forum.

The EventGrid consumes a API server as client so your API is in control of the TLS security.

Technically, this means your API should secure the endpoint so the data communicates is not readable for others (mostly public cloud).

Because this is cloud-to-cloud (in Azure) communicate, perhaps you can use VNETs to prevent access from the public internet or other Azure services?

---

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.