topic Re: Preventing user adding library from public Pypi in Data Science

Preventing user adding library from public Pypi

MarcBlanc — Thu, 21 Mar 2024 19:06:32 GMT

Hi,

When using fabric notebooks, user can install libraries sourced from public repositories such as PyPI. Is there a way to disallow that (for security reason)? And potentially redirect to a corporate artifactory ?

Other azure services such as databricks can be configure at network level to achieve such goals (e.g. block public ip), but i don't find any mention of this use case in fabric documentation ; while this seems an important security requirements for many customers.

Thanks !

Re: Preventing user adding library from public Pypi

Anonymous — Fri, 22 Mar 2024 02:50:47 GMT

Hi MarcBlanc
Thanks for using Fabric Community.
Our team has received similar feedbacks recently. So the team is working to implement Network Security Control for Libraries. Hence this is on roadmap. I will keep you posted regarding the updates.
Appreciate your patience. Please let me know if you have any further questions.

Re: Preventing user adding library from public Pypi

MarcBlanc — Fri, 22 Mar 2024 08:01:09 GMT

Hi Anonymous .

Thank you for your prompt answer ! Is it safe to assume that you also plan to give option to block/reroute to a corporate proxy all webcall from the notebooks in order to protect against data exfiltration ?

Re: Preventing user adding library from public Pypi

Anonymous — Fri, 22 Mar 2024 08:12:29 GMT

Hi MarcBlanc
For now we do not have any information regarding this option. But I will definitely share your feedback to our internal team.
Hope this helps. Please let me know if you have any further queries.

Re: Preventing user adding library from public Pypi

BIBB — Thu, 19 Dec 2024 07:53:29 GMT

Hi Anonymous, any update on this topic, ufortunately I could not find the item on Fabric's release plan.

https://learn.microsoft.com/en-us/fabric/release-plan/