cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Gottijay1999
Helper II
Helper II

How Secure is Power Automate when sending Data across different Tenant

i have a flow that currently send data as a json file to an Azure Blob storage located on a different azure tenant. To connect to the blob storage i was given an access key which enabled me store json files in the blob storage. i also use a service bus to trigger a webjob that a file has been added to the blob storage.

This works okay, The only issue is that the security team seem to think that the mode of transfer is not encrypted as the access key is just a securestring(in the blob connector), and also in trying to connect to the storage account in a different tenant it may have to go through the internet. if it does transfer through the internet, they believe the transfer should be encrypted.

Azure blob storage don't offer a mean to using encrypted keys.

Now, i'm not flow handles security, was wandering if anyone understood how security in flow works, and maybe some assurance that what i'm doing is also secure. 

or any other ideas to transfer data through an encrypted channel would be grand
flow.PNG



3 REPLIES 3
Jcook
Super User III
Super User III

Hello @Gottijay1999 

 

You could enable secure inputs and secure outputs.

 

This can be enabled by clicking the 3 dots on the action,

than click settings,

now enable secure inputs / or outputs. Depending on your situation.

 

Here is a great blog explaining this:

https://d365demystified.com/2019/12/19/secure-input-output-in-power-automate-run-history/


Did I answer your question? Mark my post as a solution!

If you like my post please hit the Thumbs Up


Proud to be a Flownaut!


Check out my blog for Power Automate tips,
tricks, and guides
FlowAltDelete





HI @Jcook, thanks for the link to the article, but i'm not sure it solves my issue, it seems to be directed at securing your data within flow so users dont see actual output and inputs in the run history. Does this feature actually encrypt the data, since the traffic still goes through the internet? i'm looking for a way to send data to another tenant securely. i haven't seen anything online about about encrypting data or any https actions in power automate. Checking if other users had experiences sending encrypted data using Power Automate.

Hi @Gottijay1999 

 

If you are using Https, than there is added security already. But you could also add a token to the Request as well.

 

https://ratsubsharewall.blogspot.com/2019/11/secure-http-request-to-msflow.html


Did I answer your question? Mark my post as a solution!

If you like my post please hit the Thumbs Up


Proud to be a Flownaut!


Check out my blog for Power Automate tips,
tricks, and guides
FlowAltDelete





Helpful resources

Announcements
Process Advisor

Introducing Process Advisor

Check out the new Process Advisor community forum board!

MPA User Group

Welcome to the User Group Public Preview

Check out new user group experience and if you are a leader please create your group

V3_PVA CAmpaign Carousel.png

Community Challenge - Giveaways!

Participate in the Power Virtual Agents Community Challenge

Carousel 2021 Release Wave 2 Plan 768x460.jpg

2021 Release Wave 2 Plan

Power Platform release plan for the 2021 release wave 2 describes all new features releasing from October 2021 through March 2022.

Carousel April Dunnam Updated 768x460.jpg

Urdu Hindi D365 Bootcamp

Dont miss our very own April Dunnam’s The Developer Guide to the Galaxy! Find out what the Power Platform has to offer for the traditional developer.

Users online (2,259)