Issue with public network access

Question

if public network access is disabled how can we perform the put blob operation in OIC through the Azure Storage adptor

Answer 1

Hi Sudha Reddy,

Thanks for reaching out to Microsoft Q&A.

If public network access to your Azure Blob Storage account is disabled, and you need to perform a 'Put Blob' operation through the Oracle Integration Cloud (OIC) using the Azure Storage adapter, there are a few alternatives you can explore:

Private Endpoint (Recommended): Private Endpoints allow secure communication with Azure resources (like Blob Storage) from your private network (e.g., OIC hosted on an Azure VNet or a connected network).

Steps:

• Create a Private Endpoint for your Azure Blob Storage account in the Azure portal.
• Ensure that your Oracle Integration Cloud (OIC) instance is within the same virtual network or can connect to the virtual network where the private endpoint is located (this can be done through VNet peering or site-to-site VPN).
• Configure OIC to use the private endpoint to access the Blob Storage account.

This ensures that even with public network access disabled, you can securely access the Blob Storage over a private connection.

Service Endpoints: If OIC is hosted on an Azure Virtual Network (VNet), you can enable Service Endpoints for Azure Storage in your VNet to allow access to Blob Storage without enabling public access.

Use Azure Managed Identity: If OIC supports authentication through Azure Managed Identity, you can use a Managed Identity to authenticate and securely access Azure Blob Storage without needing public network access. This option enhances security by removing the need for public network access or even SAS tokens.

Use a Proxy or VPN: If OIC is hosted externally and cannot directly access the private endpoint or VNet service endpoint, you can use a VPN or proxy server to route traffic from OIC through a secure channel to Azure Blob Storage.

SAS Token with IP Restriction: If none of the above options are feasible, you can still use SAS tokens with IP restrictions. While public access will be disabled, you can configure the SAS token to allow specific IP ranges (like the IP addresses of your OIC) to perform blob operations.

If OIC is hosted in Azure or can be connected to Azure, using Private Endpoints is the most secure and efficient approach.

Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.