Forum Discussion

MarcBlanc's avatar
MarcBlanc
Frequent Visitor
2 years ago
Solved

Preventing user adding library from public Pypi

Hi,

 

When using fabric notebooks, user can install libraries sourced from public repositories such as PyPI. Is there a way to disallow that (for security reason)? And potentially redirect to a corporate artifactory ?

Other azure services such as databricks can be configure at network level to achieve such goals (e.g. block public ip), but i don't find any mention of this use case in fabric documentation ; while this seems an important security requirements for many customers.

 

Thanks !

  • Anonymous's avatar
    Anonymous
    2 years ago

    Hi MarcBlanc 
    Thanks for using Fabric Community.
    Our team has received similar feedbacks recently. So the team is working to implement Network Security Control for Libraries. Hence this is on roadmap. I will keep you posted regarding the updates.
    Appreciate your patience. Please let me know if you have any further questions.

4 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi MarcBlanc 
    Thanks for using Fabric Community.
    Our team has received similar feedbacks recently. So the team is working to implement Network Security Control for Libraries. Hence this is on roadmap. I will keep you posted regarding the updates.
    Appreciate your patience. Please let me know if you have any further questions.

    • MarcBlanc's avatar
      MarcBlanc
      Frequent Visitor

      Hi Anonymous .

      Thank you for your prompt answer ! Is it safe to assume that you also plan to give option to block/reroute to a corporate proxy all webcall from the notebooks in order to protect against data exfiltration ?

      • Anonymous's avatar
        Anonymous
        Not applicable

        Hi MarcBlanc 
        For now we do not have any information regarding this option. But I will definitely share your feedback to our internal team. 
        Hope this helps. Please let me know if you have any further queries.