[RULE] Event Hub Firewall

[BernieWhite]

Existing rule

No response

Suggested rule

Access to Event Hub endpoints should be restricted to only allowed sources.

• Ideally use private endpoints. OR
• Configure the firewall in default deny mode.

Pillar

Security

Additional context

• https://learn.microsoft.com/en-us/azure/event-hubs/event-hubs-ip-filtering
• https://learn.microsoft.com/en-us/azure/event-hubs/private-link-service
• https://learn.microsoft.com/en-us/azure/event-hubs/policy-reference
• https://learn.microsoft.com/en-us/security/benchmark/azure/baselines/event-hubs-security-baseline?toc=%2Fazure%2Fevent-hubs%2FTOC.json#disable-public-network-access

[BenjaminEngeset]