Unanswered

How Secure is Power Automate when sending Data across different Tenant

(0) Share

Report

Posted on by Gottijay1999

i have a flow that currently send data as a json file to an Azure Blob storage located on a different azure tenant. To connect to the blob storage i was given an access key which enabled me store json files in the blob storage. i also use a service bus to trigger a webjob that a file has been added to the blob storage.

This works okay, The only issue is that the security team seem to think that the mode of transfer is not encrypted as the access key is just a securestring(in the blob connector), and also in trying to connect to the storage account in a different tenant it may have to go through the internet. if it does transfer through the internet, they believe the transfer should be encrypted.

Azure blob storage don't offer a mean to using encrypted keys.

Now, i'm not flow handles security, was wandering if anyone understood how security in flow works, and maybe some assurance that what i'm doing is also secure.

or any other ideas to transfer data through an encrypted channel would be grand

Categories:

General topics

I have the same question (0)

All responses (4)

Answers (0)

Jcook 7,781 Most Valuable Professional on at

Like (0)

Report

Hello @Gottijay1999

You could enable secure inputs and secure outputs.

This can be enabled by clicking the 3 dots on the action,

than click settings,

now enable secure inputs / or outputs. Depending on your situation.

Here is a great blog explaining this:

https://d365demystified.com/2019/12/19/secure-input-output-in-power-automate-run-history/

Was this reply helpful? Yes No
Gottijay1999 95 on at

Like (0)

Report

HI @Jcook, thanks for the link to the article, but i'm not sure it solves my issue, it seems to be directed at securing your data within flow so users dont see actual output and inputs in the run history. Does this feature actually encrypt the data, since the traffic still goes through the internet? i'm looking for a way to send data to another tenant securely. i haven't seen anything online about about encrypting data or any https actions in power automate. Checking if other users had experiences sending encrypted data using Power Automate.

Was this reply helpful? Yes No
Jcook 7,781 Most Valuable Professional on at

Like (0)

Report

Hi @Gottijay1999

If you are using Https, than there is added security already. But you could also add a token to the Request as well.

https://ratsubsharewall.blogspot.com/2019/11/secure-http-request-to-msflow.html

Was this reply helpful? Yes No
sandeep853085 4 on at

Like (0)

Report

Hi,

When sending data to azure datalake did you select public network access "allowed for all networks"? Is there any way to select "Enabled from selected virtual networks and IP addresses" and send data from power automate to datalake?

Was this reply helpful? Yes No