Outbound access protection for Data Factory (Generally Available)

[B_Gautam]

Co-author: Abhishek Narain

Workspace outbound access protection (OAP) is widely accessible for Data Factory workloads—including Pipelines, Copy Job, and Dataflows—as well as for Mirrored Databases such as Mirrored SQL Database and Mirrored Snowflake.

Key benefits

• Enhanced outbound security: By leveraging OAP rules, organizations can ensure that the Data Factory items from the protected workspace can only connect to trusted endpoints allowed by workspace admins. All the other outbound connections to public internet and other destinations are blocked from the workspace.
• Granular control: Control outbound access per workspace. This allows you to apply differentiated controls across business units, environments (dev/test/prod), data domains, or project.
• Data exfiltration prevention: Workspace OAP when combined with Inbound protection can help the customer prevent the data from exfiltrated outside the workspace boundary.
• Better compliance: Meet stringent compliance and regulatory requirements by ensuring your sensitive data never leaves the workspace boundary if it’s not allowed by Workspace Admins.

Additional functionalities

• Exploratory APIs in pipelines and Copy Job: APIs used for Browse, Preview, and Test Connection operations will support outbound access protection.
• Copy job in OAP will support Datawarehouse as destination.
• Workspace level granularity for Notebook and Spark Job Definitions connection types.

Machine Learning Models and Experiments are supported with outbound access protection.

Data Agent and Eventstreams are now supported with outbound access protection in preview. 

To learn more about Workspace OAP for Data Factory, set-up scope and limitations, refer to the Workspace outbound access protection overview documentation and Workspace outbound access protection for Data Factory documentation.

What’s next?

We are actively working to expand OAP support for additional experiences and plan to add support for Power BI Semantic Models and Reports soon.

Your feedback is essential! Let us know how we can make Fabric even more secure and flexible for your workloads by sharing your feedback at Fabric Ideas – Microsoft Fabric Community.