Allow Public Network Access - Disabled, I can still access the workspace from public internet

rhlp
New Contributor

Hi everyone,

We configured Private Link for an existing Azure Databricks workspace (Hybrid workspace):

  • VNet injection and Secure Cluster Connectivity enabled
  • databricks_ui_api private endpoint created
  • publicNetworkAccess = Disabled
  • requiredNsgRules = NoAzureDatabricksRules

Access through the private endpoint works, including browser login and clusters (tested it via a jumpbox)

However, the workspace is still accessible from the public internet. I confirmed that an authenticated API request to the public IP returns HTTP 200, even after waiting over an hour. Azure shows the workspace update as succeeded.

Has anyone experienced this? could this be a synchronization issue? How to resolve this?