Connection issue in azure

Question

I have a requirement wherein the power automate talks with azure function app and azure function talks with azure storage account. Now everytime the power automate flow is run it downloads the data and keeps it in storage account. The above mentioned flow works if the azure function and azure storage account is kept public. Now since the data is PII I can keep the storage account public. I made it private by allowing traffic from selected vnet and adding the same vnet integration in azure function app. This make the function app public with access restriction enabled. But due to this the power automate which is outside the azure network is unable to talk with azure function app. I tried to keep the azure function app public which makes the power automate hitting the function app but then function app is unable to talk with private storage account. Can someone suggest anything here. Okay to make some changes in architecture as well but do not want the PII data to be exposed publicly

Answer 1

Hi @Dinesh Prajapati

Instead of using a power automate flow, replace it with a logic app and integrate that logic app with a virtual network That way your azure function can be within the same vnet and you can secure access so that the function app as well as the storage account doesn't have public access.

Power Automate and Logic app have essentially the same connectors. You can export your power automate and import as a logic app. You can reference Secure traffic between Standard workflows and virtual networks - Azure Logic Apps | Microsoft Learn on how to integrate a Logic App with a virtual network.