Power BI - Azure Service Bus security

[hansg]

The Power BI on-premises data gateway architecture relies on Azure Service Bus for the communication between on-premises data gateway and Gateway Cloud Service. How secure is this Azure Service Bus? I am thinking of a scenario where someone could subscribe to a topic on this Azure Service Bus and 'hijack' results from on-premises data sources. I assume this is not possible, but how does Microsoft guarantee this cannot happen?

[lbendlin]

All we know about that part is that they use port 443, and that you can bring your own certificate if you want.

[v-jayw-msft]

Hi @hansg ,

You may take a look at this document.

https://docs.microsoft.com/en-us/security/benchmark/azure/overview-v2 

Best Regards,

Jay

[hansg]

Thanks for the information. But the Azure security baseline is more about what we as a customer need to do to ensure a secure Azure environment. In this case, I want to know what Microsoft does to protect 'hidden' services that are used between the cloud gateway and an on-premises data gateway in a Power BI setup. My assumption is that Microsoft adheres to this security baseline for the Service Bus used, but that's what I want to know for sure.

Kind regards,

Hans.

[lbendlin]

It's part of the fine print in the contract. They are liable if something like this should happen.

[hansg]

Do you have a quote from that contract fine print? 

[lbendlin]

Contracts are company specific. Ask your Vendor Management department.