Use this document to learn how you can grant an Astro cluster and its Deployments access to your external Azure resources.
Publicly accessible endpoints allow you to quickly connect your Astro clusters or Deployments to Azure through an Airflow connection. See Create a connection to a public Azure endpoint. If your cloud restricts IP addresses, you can add the external IPs of your Deployment or cluster to an Azure resource’s allowlist.
If you have stricter security requirements, you can create a private connection to Azure in a few different ways.
After you create a connection from your cluster to Azure, you might also need to individually authorize Deployments to access specific resources. See Authorize your Deployment using workload identity.
Standard clusters have different connection options than dedicated clusters.
Standard clusters can connect to Azure in the following ways:
Dedicated clusters can also connect to Azure using static IP addresses. Additionally, they support a number of private connectivity options including:
If you require a private connection between Astro and Azure, Astronomer recommends configuring a dedicated cluster. See Create a dedicated cluster.