Add Microsoft Foundry to a network security perimeter

Quickly learn how to associate a Microsoft Foundry resource with a network security perimeter and where to find detailed guidance for access rules, logging, and management.

Add Microsoft Foundry to a network security perimeter

Use a network security perimeter (NSP) to restrict data-plane access to your Microsoft Foundry resource and group it with other protected PaaS resources. An NSP lets you:

• Enforce inbound and outbound access rules instead of broad public exposure.
• Reduce data exfiltration risk by containing traffic within a logical boundary.
• Centrally log network access decisions across associated resources.

This article gives only the Foundry-specific pointers you need. All procedural detail for creating perimeters, defining access rules, enabling logging, and using APIs lives in existing Azure networking documentation. Follow the links in each section for the authoritative steps.

Prerequisites

• An Azure subscription where you can create and manage network security perimeter resources. At minimum, use an account with the Owner, Contributor, or Network Contributor role (or a custom role with equivalent permissions).
• A Foundry resource.
• A network security perimeter (NSP) and profile.
• If you use Azure CLI automation, Azure CLI 2.75.0 or later.
• If you want to query access logs, a Log Analytics workspace.

For the full set of required actions and permissions (profiles, associations, access rules, diagnostic settings), see Azure RBAC permissions required for network security perimeter.

Verify your setup (Azure CLI)

Run this command to verify that the nsp Azure CLI extension is available and that you can query NSP metadata.

az extension add --name nsp --upgrade
az network perimeter associable-resource-type list --output table

The command returns a list of resource types that you can associate with an NSP. If you see an authentication error, sign in by using az login and try again.

Reference: az network perimeter associable-resource-type list

Associate your Foundry resource

Portal (summary):

1. Open the Azure portal and go to your Network security perimeter resource.
2. Select Associated resources (or Resources depending on the UI iteration) > Add / Associate.
3. Choose the target profile, pick your Foundry resource, set access mode (start with Learning), and confirm.

Azure CLI (example):

az network perimeter association create \
	--name MyAssociation \
	--perimeter-name MyPerimeter \
	--resource-group MyResourceGroup \
	--access-mode Learning \
	--private-link-resource "{id:<FOUNDRY_RESOURCE_ARM_ID>}" \
	--profile "{id:<NSP_PROFILE_ARM_ID>}"

This command associates your Foundry resource with a profile in Learning mode so you can review access logs before you enforce access rules.

Reference: az network perimeter association create

For CLI (for automation) and full creation steps, see the NSP quickstarts (CLI or PowerShell):

• Create a network security perimeter (CLI)
• Create a network security perimeter (PowerShell)

After association, traffic evaluation begins per the selected access mode.

Access modes (Learning vs Enforced)

Start in Learning mode to observe potential denies. Switch to Enforced mode once you define the required inbound and outbound rules. For more details, see NSP access modes.

Interaction with publicNetworkAccess

• Learning mode: publicNetworkAccess still governs exposure while you assess logs.
• Enforced mode: NSP rules take precedence; publicNetworkAccess is effectively overridden by allowed inbound rules.

Change access mode

In the portal, locate the association entry for your Foundry resource and choose Change access mode. For automation, use az network perimeter association update.

Reference: az network perimeter association update

Enable logging

Configure diagnostic settings on the NSP resource to send allLogs to Log Analytics, Storage, or Event Hubs.

For detailed steps, see Diagnostic logs for Network Security Perimeter.

Interpret logs

Query the NSPAccessLogs table in your Log Analytics workspace to validate allow and deny decisions. Use the logs to finalize required sources or destinations before enforcing.

For examples of log fields you can filter on, such as MatchedRule or Profile, see Add an Azure OpenAI service to a network security perimeter.

Define access rules

Within the profile, choose:

• Inbound rules: IP ranges or subscription (managed identity) sources.
• Outbound rules: FQDN destinations needed beyond co-located perimeter resources.

Rule creation steps (portal screenshots, CLI parameters, examples):

• A walkthrough of configuring inbound and outbound rules using Azure OpenAI NSP (which applies to Foundry data‑plane scenarios).
• Azure CLI reference (access rules): az network perimeter profile access-rule

Implicit trust: Resources inside the same NSP can reach each other when requests are authenticated through managed identity or role assignment. You need explicit rules only for external sources, destinations, or API key patterns.

Inbound rules

Choose IP range (CIDR) or subscription scope. Prefer subscription and managed identity for internal service‑to‑service traffic. Use IP range only when identity‑based access isn’t feasible.

Outbound rules

List only required FQDNs (principle of least privilege). Keep dependent Azure services in the same NSP to minimize outbound allow entries.

Validate before enforcement

1. Stay in Learning mode initially; review access logs for denies affecting required traffic.
2. Add or refine inbound and outbound rules.
3. Switch to Enforced mode.
4. Open Microsoft Foundry and perform a model deployment or chat test. Success indicates required traffic is permitted.
5. If blocked, revert to Learning mode or add rules and retry.

Troubleshooting

• If the portal experience doesn’t show your Foundry resource as associable, confirm that Foundry is supported for NSP association in your region and review the supported resource types: Network security perimeter concepts.
• If you don’t see logs after enabling diagnostics, confirm that you selected allLogs and that your destination is supported: Diagnostic logs for Network Security Perimeter.
• If Learning mode looks correct but Enforced mode blocks access, return to Learning mode and add the minimum inbound and outbound rules needed for your scenario: Azure OpenAI NSP guidance.

Limitations and considerations

• NSP governs data-plane traffic. Control-plane (management) operations might still succeed unless separately restricted.
• Use a managed identity (system or user-assigned) with appropriate role assignments for any data source access (for example Azure Blob Storage used for batch inputs/outputs).
• Co-locate dependent services (Azure OpenAI, Azure Storage, Azure AI Search, and so on) in the same NSP when you need mutual access with minimal outbound allow rules.

For more information, see Network security perimeter concepts.

View and manage configuration

Use REST or CLI to audit and reconcile:

• REST reference (perimeter core): Network security perimeter REST API
• (Example) Profile and association operations (CLI): Azure CLI network perimeter commands

Use the latest stable or preview version shown in the REST reference when scripting.

Always confirm the latest API version in the reference before scripting.

Related content

• Role-based access control for Foundry
• Network security perimeter concepts
• Azure OpenAI NSP article
• Azure CLI network perimeter reference
• What is Foundry Agent Service?