What's the best architectural decision to access internal API on Azure?

Najam ul Saqib 100 Reputation points
2024-06-20T14:52:40.1533333+00:00

Hi,

I am seeing an architectural diagram of a resource group that contains a VNet Gateway connected to a public address.

JDK-Prod-UKSouth-02-min

On inquiring, it turns out that the dev has this reason "I am using this to VPN to the subnet when we need to occasionally manually query the database or query an internal API. Is that the wrong approach?"

Can someone tell me if that's the most secure approach to solve this approach. Please explain if there's any better way.

P.S. if you see any other bad security design in the diagram, you can mention that as well.

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,429 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,252 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Luis Arias 5,751 Reputation points
    2024-06-21T10:03:56.4933333+00:00

    Hi Najam ul Saqib,It looks like do you have some question to understand That Cloud Diagram, so let me go to your question:

    One additional suggestion that I can share if this VPN it's only for development purpose and it's a minimal quantity of developer It's possible to use an Azure VM and bastion to connect to your cloud environment and from that point start to query Database and call APIs. (https://video2.skills-academy.com/en-us/azure/bastion/tutorial-create-host-portal / https://video2.skills-academy.com/en-us/azure/virtual-machines/windows/quick-create-portal)

    If the information helped address your question, please Accept the answer.

    Luis