Does disabling the Public Access on Azure Managed Disks impact CVO?
Applies to
- Cloud Volumes ONTAP (CVO)
- Microsoft Azure
- Azure Managed Disks
Answer
- Azure Managed disks should only be accessible from Public network via SAS for import/export tasks when they are unattached from the Azure VM.
- In normal scenarios when disks are attached to the CVO VMs, the public access does not impact CVO Azure Managed Disks.
- There should be no need for network access to the Managed disks outside of the communication between them and the VM(s) they are attached to.
- If your business requires to disable the public and private access on Azure Managed Disks for security concerns, this can be done from the Azure portal but has to be done individually on each Managed Disk.
- If the desired outcome is to allow private access to the Managed Disks but disable public access a Disk Access will need to be created in the Resource Group of the CVO
- If the desired outcome is to disable both public and private access to the Managed Disks this can easily be done from the Azure portal under the Network section for each individual disk:
Additional Information
additionalInformation_text