IP address / range filter for Azure Service Bus

Question

We are implementing a solution that includes third-party systems that access our Azure Service Bus, secured by SAS. While this SAS is safe, we are happy :)

But we want to limit the impact if the SAS is compromised. For Azure Storage, SAS can be released with an IP range filter that helps, but it is not supported for the service bus.

Is there a way to restrict access to the service bus based on IP address? This is especially true, in our case, for third-party systems that must read the service bus.

Can someone switch to ACS (which option is for other reasons)?

Answer 1

IP. , , .

, SAS , . -, SAS , , . , Token factory , IP-.

, SAS , , , .

, . , , , .

( , ), , Azure Key, , , , .

Answer 2

API Azure . https://azure.microsoft.com/en-us/documentation/articles/api-management-get-started/

API Azure :

• IP https://msdn.microsoft.com/en-us/library/dn894078.aspx#RestrictCallerIPs
• (JWT)
• / API

: http://blog.brauwers.nl/2014/05/29/exposing-a-service-bus-topic-using-azure-api-management/

ACS , / Azure AD Azure B2C.