landing-zone-allowed-public-ip

Type: decision

Decision

Data-plane operations from outside Azure must use the platform-trusted public IP.

Why

Without this, application teams cannot access Azure data-plane resources from their laptops.

Violations

• Platform configuring PaaS firewall rules on behalf of the application team.

Links

• deployment-config-in-repo — There is one trusted IP because it lives in a platform variable rather than in each team's config.

← Back to knowledge graph