Limit access to App Configuration from the Internet

[azachert]

Is there a mechanism to limit access to App Configuration to selected VNet / Subnet or selected IPs? I'm looking for a mechiansm similar to Networking from Key Vault or IP Restrictions from App Service.

[zhenlan]

@azachert App Configuration supports both

• VNET via private endpoint
• IP restrictions via service tag

These features will be rolled out in a week or two (public preview). Please let me know if you like to try it earlier and I can include you for private preview.

cc: @lisaguthrie

[zhenlan]

Both features are available for public preview now. Please find links to the documentation below.

• VNET via private endpoint
  https://docs.microsoft.com/en-us/azure/azure-app-configuration/concept-private-endpoint
• IP restrictions via service tag
  https://docs.microsoft.com/en-us/azure/virtual-network/service-tags-overview