You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As an Airlock Manager,
I want to have a user resource template
So that I can deploy it into Research Workspace and use user resources (VMs in Guacamole) to review export data requests
Requirement
When deployed into a Research Workspace (i.e. for reviewing export requests), a Review VM must be isolated from other resources in the workspace, as in some cases, reviewer is not allowed to access the research, they can only access the data that is intended to be exported.
To achieve this, we can have a private endpoint for the export in progress storage account, and an NSG that allows the VM to access that storage account, but limits access for everything else.
The text was updated successfully, but these errors were encountered:
tanya-borisova
changed the title
Review VM is isolated from other resources in the workspace
Airlock Export Review VM is isolated from other resources in the workspace
Sep 21, 2022
tanya-borisova
changed the title
Airlock Export Review VM is isolated from other resources in the workspace
User resource template for Export Review VM
Sep 21, 2022
Description
As an Airlock Manager,
I want to have a user resource template
So that I can deploy it into Research Workspace and use user resources (VMs in Guacamole) to review export data requests
Requirement
When deployed into a Research Workspace (i.e. for reviewing export requests), a Review VM must be isolated from other resources in the workspace, as in some cases, reviewer is not allowed to access the research, they can only access the data that is intended to be exported.
To achieve this, we can have a private endpoint for the export in progress storage account, and an NSG that allows the VM to access that storage account, but limits access for everything else.
The text was updated successfully, but these errors were encountered: