Forum Discussion
Enabling Azure Data Factory to Access Restricted REST API and Transfer Data to Lakehouse: IP Address
Currently, you can allow-list the whole Azure Data Factory IP range at your source that hosts the REST API. The IP range is shared across Fabric Data Factory. Do discuss this approach with your security team.
https://learn.microsoft.com/en-us/azure/data-factory/azure-integration-runtime-ip-addresses#azure-integration-runtime-ip-addresses-specific-regions (Use the integration runtime IP address). If you want a reduced IP ranges then allow-list only a specific region that your Fabric tenant is setup in.
Alternatively, we are working on adding On-premises gateway support for pipelines in Fabric which will allow you to read data from private rest api sources from within your network or help you with a static IP (on-premises gateway node).
Currently, you can allow-list the whole Azure Data Factory IP range at your source that hosts the REST API. The IP range is shared across Fabric Data Factory. Do discuss this approach with your security team.
https://learn.microsoft.com/en-us/azure/data-factory/azure-integration-runtime-ip-addresses#azure-integration-runtime-ip-addresses-specific-regions (Use the integration runtime IP address). If you want a reduced IP ranges then allow-list only a specific region that your Fabric tenant is setup in.
Alternatively, we are working on adding On-premises gateway support for pipelines in Fabric which will allow you to read data from private rest api sources from within your network or help you with a static IP (on-premises gateway node).
Nice, thanks for that.
On the reverse, is there anything planned to allow us to control what Data Factory can access? Not sure I'm a fan of allowing it to access any web API on the public internet, especially as it can use them as a data sink.
I popped an idea in here: Restrict web access for Data Factory
How can I integrate a web API for data import into ADF after the recent changes? Could you please advise me on the steps to follow?
DavidCousins ajarora What is the idea of having the option in ADF to create web connections and use them as a source in copy pipeline activities since web APIs are no longer allowed?