Support NetworkAccessPolicy as part of OSDisk specs

[harshavmb]

Reposting from here.

OS disk specs here doesn't contain networkAccessPolicy flag which is present part of managed_disk_properties.

Without this, our disks are open to internet with NetworkAccessPolicyAllowAll (applied by default). Though a disk attached to a running VM can't have an export SAS URL. We would like to have an argument which enables us to explicitly apply NetworkAccessPolicyDenyAll/NetworkAccessPolicyAllowPrivate flag to avoid exposure to internet.

This isn't just for VM but also for VMSS resources. I'm new to this repo, hence not aware of contributing.

Shall you need more details, please revert to me.

Thanks,
Harsha

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @Drewm3, @Vaibhav-Agar.

Issue Details

---

Reposting from here.

OS disk specs here doesn't contain networkAccessPolicy flag which is present part of managed_disk_properties.

Without this, our disks are open to internet with NetworkAccessPolicyAllowAll (applied by default). Though a disk attached to a running VM can't have an export SAS URL. We would like to have an argument which enables us to explicitly apply NetworkAccessPolicyDenyAll/NetworkAccessPolicyAllowPrivate flag to avoid exposure to internet.

This isn't just for VM but also for VMSS resources. I'm new to this repo, hence not aware of contributing.

Shall you need more details, please revert to me.

Thanks,
Harsha

Author:	harshavmb
Assignees:	-
Labels:	Compute, Compute - Managed Disks, Service Attention, customer-reported, feature-request
Milestone:	-

[navba-MSFT]

Adding Service team to assist on this.

@Drewm3, @Vaibhav-Agar Could you please look into this issue ? Thanks in advance.