azure - Key Vault - 防火墙和虚拟网络 : Existing virtual network is not authorized

Question

我将 key 保管库配置为从我的应用程序签署 JWT，并限制了对特定虚拟网络和相关子网的访问。一开始工作正常，但突然停止工作，出现以下错误:

{"error":{"code":"Forbidden","message":"Client address (52.166.11.176) is not authorized and caller is not a trusted service","innererror":{"code":"ForbiddenByFirewall"}}}

我必须允许所有网络来解决问题。

你对这种行为有什么想法吗？

谢谢

马里奥

Answer 1

发生错误是正常的，因为您限制了对指定虚拟网络的访问，但客户端地址并非来自该授权网络。请注意

The virtual network service endpoints for Azure Key Vault allow you to restrict access to a specified virtual network. The endpoints also allow you to restrict access to a list of IPv4 (internet protocol version 4) address ranges. Any user connecting to your key vault from outside those sources is denied access.

我建议您先完成 key 保管库配置，然后再将网络访问限制为特定虚拟网络。

引用号:Virtual network service endpoints for Azure Key Vault