Preventing user adding library from public Pypi

[MarcBlanc]

Hi,

When using fabric notebooks, user can install libraries sourced from public repositories such as PyPI. Is there a way to disallow that (for security reason)? And potentially redirect to a corporate artifactory ?

Other azure services such as databricks can be configure at network level to achieve such goals (e.g. block public ip), but i don't find any mention of this use case in fabric documentation ; while this seems an important security requirements for many customers.

Thanks !

[BIBB]

Hi @v-nikhilan-msft, any update on this topic, ufortunately I could not find the item on Fabric's release plan. 

https://learn.microsoft.com/en-us/fabric/release-plan/

[v-nikhilan-msft · Accepted solution]

Hi @MarcBlanc 
Thanks for using Fabric Community.
Our team has received similar feedbacks recently. So the team is working to implement Network Security Control for Libraries. Hence this is on roadmap. I will keep you posted regarding the updates.
Appreciate your patience. Please let me know if you have any further questions.

[MarcBlanc]

Hi @v-nikhilan-msft .

Thank you for your prompt answer ! Is it safe to assume that you also plan to give option to block/reroute to a corporate proxy all webcall from the notebooks in order to protect against data exfiltration ?

[v-nikhilan-msft]

Hi @MarcBlanc 
For now we do not have any information regarding this option. But I will definitely share your feedback to our internal team. 
Hope this helps. Please let me know if you have any further queries.