I would like that a blob storage private endpoint is created for every storage account which uses blob storage. So for that purpose, i want to use an azure policy with deployIfNotExist rules. So if a storage account creates a blob, the azure policy should automatically deploy an private endpoint in a specified subnet.
Is that possible? Can Azure Policy detect a container/blob creation in an Azure storage account?
I want to give a specific RBAC to a user so that he can create a NIC but not to modify. As a matter of fact, what it is aimed is that he shouldn't have permission to change the dynamic ip to static ip and change the ip address of the NIC.
I have checked the RBACs of NIC, but it seems that if he has Microsoft.Network/networkInterfaces/write permission , he can create a network interface or update an existing network interface. So this Rbac is not as detailed as i want.
I have also tried to give all permissions but not Microsoft.Network/networkInterfaces/read. In that case, the NIC can be created but i can neither see the ip of the nic nor ssh/rdp to the VM. So it is not a solution for me.
I have checked the built-in Azure Policies, but there isn't nothing good for my needs.
Any idea?
I have a custom image of Debian 6 and i have created an Azure Vm out of it. I am trying to ssh to it but it fails. The port 22 doesn't respond. I see the login screen of the vm from the troubleshooting section so it means that the boot is successfull. I have attached to the VM a Nic with a private&public ip.
I have also tested this local image in my local Hyper-V and i can ssh to it with a static ip address. But i cannot do the same in Azure neither with public nor private ip.
I didn't put any nsg so it is not a nsg problem.
Do you have any idea?
I have an Elastic Search running on 9200 on rhel 6. I cannot reach to it in aws with private/public ip. On the other hand, i try it with curl localhost:9200, it is good. I can also ping google.
I have given the necessary port access from the security group.
sec inbound allowed port:
My /etc/resolv.conf is :
generated by /sbin/dhclient-script
search ec2.internal
nameserver 172.31.0.2
UPDATE: I have also installed an apache webserver on 80 port. And it is responding from the public and private IPs. So the main problem is mainly with Elasticsearch or 9200 port. Any idea?