Security and AuthN/AuthZ

[CloudViking]

Look at prioritizing security in the service. There are certain features that we should look at implementing, i.e:

• scoped access to/from all services in the project (LogicApp, KeyVault, Storage Account, Automation Account)
• AuthN between Front end and Logic App endpoint
• AuthZ once you are in the tool (only see subscriptions you requested to create)

[CloudViking]

Initial MVP for Security would include:

• Logic App only accepting HTTPS traffic
• Scoping to accept traffic from only one specific IP address
• Scoped to accept traffic from only SP