Call an Azure Function App with Access Restrictions from a Databricks Workspace

[erigaud]

Hello,

As the title says, I am trying to call an function from an Azure Function App configured with access restrictions from a python notebook in my Databricks workspace. The Function App resource is in a different subscription as the Databricks workspace.

I should point out that when I disable the access restrictions from the function app and enable the connection from all networks, the call from Databricks works fine. This suggests that there are missing rules in the restrictions, but I do not know which one to add. Also note that our workspace has Secure Cluster Connectivity enabled, meaning we do not have a public IP in the managed resource group of our workspace.

I tried adding our cluster IP address to the network rules of the function app, but this does not seem to work. 

Do you have an id of what rules/ip ranges should be added to the access restriction rules of the function app in order for this to work ? 

Thank you very much

[erigaud]

Hello @Retired_mod,

You mention that :

• You can find the list of dynamic IP ranges in the Databricks documentation.

Do you have a link to that point of the documentation ? I have not been able to find it. Thank you !

[erigaud · Accepted solution]

Update : 
Problem was fixed ! 
The key was to set an VNET rule in the access restriction, giving access directly to the subnets used by Databricks.

It seems like for Microsoft to Microsoft connections, the IP addresses are not used, so adding the IP ranges in the rule does nothing, but adding the subnet directly works.