Allow Azure function app access to AWS E3 instance port
My company has an Azure function app that accesses a service on an AWS EC2 instance. We use an AWS security group to only allow access to the service's port by the 7 possible outbound IP addresses used by the Azure function app. We find these listed in Azure portal. However when the function app "scales" apparently it can be executed from a list of ~600 CIDR ranges of possible Azure IP addresses, from AzureCloud.eastus2 in my case. The function app fails to access the needed web service in these cases and fails. AWS security groups only allow 60 inbound rules so I couldn't set 600 even if I wanted. Is there a better approach to opening an AWS instance's port to an Azure function app?
from Recent Questions - Stack Overflow https://ift.tt/6pgBmhQ
https://ift.tt/7vxO08M
Comments
Post a Comment