Disable public access

Статья
2025-04-14

If you disable public access, connectivity to the server is only possible via private endpoints.

You must configure those private endpoints so that hosts that can route traffic to the Azure virtual network in which you inject the private endpoints, can access your Azure Database for PostgreSQL flexible server.

When public access is disabled, any firewall rules you created while public access was enabled, aren't enforced.

Also, any modifications made to the firewall rules are discarded.

Portal
CLI

Using the Azure portal:

Select your Azure Database for PostgreSQL flexible server.
In the resource menu, select Networking.
Clear the Allow public access to this resource through the internet using a public IP address checkbox.
Select Save.
A notification informs you that the changes are being applied.
Also, the status of the server changes to Updating.
When the process completes, a notification informs you that the changes were applied.
Кроме того, состояние сервера изменяется на Ready.

You can disable public access on a server via the az postgres flexible-server update command.

az postgres flexible-server update \
  --resource-group <resource_group> \
  --name <server> \
  --public-access disabled

If you attempt to disable public access on a server which isn't in Ready state, you receive an error like this:

Code: 
Message: Server <server> is busy with other operations. Please try later

If you attempt to disable public access on a server which wasn't deployed with networking mode public access (allowed IP addresses), you don't receive an error. The request to change that configuration is ignored.

To determine if a server has public access disabled or enabled, run the following command:

az postgres flexible-server show \
  --resource-group <resource_group> \
  --name <server> \
  --query '{"publicAccess":network.publicNetworkAccess}'

Поделиться через

Disable public access

Related content

Обратная связь

Дополнительные ресурсы