PSA for Azure users who automate deploys and skip Portal banners: default outbound access is going away for subnets.

[dragosr@chaos.social]

PSA for Azure users who automate deploys and skip Portal banners: default outbound access is going away for subnets.

Pre-April 1st subnets are grandfathered. New ones are private by default - you can re-enable old outbound behaviour explicitly, or deploy a NAT Gateway (~$36/mo) as the better architecture.

How many folks will find out when their deploy scripts and connectivity breaks April 1st? Private-by-default is the right security move though.

Default Outbound Access in Azure - Azure Virtual Network

Learn about default outbound access in Azure.

(learn.microsoft.com)