cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Gottijay1999
Helper II
Helper II

How Secure is Power Automate when sending Data across different Tenant

i have a flow that currently send data as a json file to an Azure Blob storage located on a different azure tenant. To connect to the blob storage i was given an access key which enabled me store json files in the blob storage. i also use a service bus to trigger a webjob that a file has been added to the blob storage.

This works okay, The only issue is that the security team seem to think that the mode of transfer is not encrypted as the access key is just a securestring(in the blob connector), and also in trying to connect to the storage account in a different tenant it may have to go through the internet. if it does transfer through the internet, they believe the transfer should be encrypted.

Azure blob storage don't offer a mean to using encrypted keys.

Now, i'm not flow handles security, was wandering if anyone understood how security in flow works, and maybe some assurance that what i'm doing is also secure. 

or any other ideas to transfer data through an encrypted channel would be grand
flow.PNG



3 REPLIES 3
Jcook
Super User
Super User

Hello @Gottijay1999 

 

You could enable secure inputs and secure outputs.

 

This can be enabled by clicking the 3 dots on the action,

than click settings,

now enable secure inputs / or outputs. Depending on your situation.

 

Here is a great blog explaining this:

https://d365demystified.com/2019/12/19/secure-input-output-in-power-automate-run-history/


Did I answer your question? Mark my post as a solution!

If you like my post please hit the Thumbs Up


Proud to be a Flownaut!


Check out my blog for Power Automate tips,
tricks, and guides
FlowAltDelete





HI @Jcook, thanks for the link to the article, but i'm not sure it solves my issue, it seems to be directed at securing your data within flow so users dont see actual output and inputs in the run history. Does this feature actually encrypt the data, since the traffic still goes through the internet? i'm looking for a way to send data to another tenant securely. i haven't seen anything online about about encrypting data or any https actions in power automate. Checking if other users had experiences sending encrypted data using Power Automate.

Hi @Gottijay1999 

 

If you are using Https, than there is added security already. But you could also add a token to the Request as well.

 

https://ratsubsharewall.blogspot.com/2019/11/secure-http-request-to-msflow.html


Did I answer your question? Mark my post as a solution!

If you like my post please hit the Thumbs Up


Proud to be a Flownaut!


Check out my blog for Power Automate tips,
tricks, and guides
FlowAltDelete





Helpful resources

Announcements
Power Platform Conf 2022 768x460.jpg

Join us for Microsoft Power Platform Conference

The first Microsoft-sponsored Power Platform Conference is coming in September. 100+ speakers, 150+ sessions, and what's new and next for Power Platform.

MPA Virtual Workshop Carousel 768x460.png

Register for a Free Workshop

Learn to digitize and optimize business processes and connect all your applications to share data in real time.

Power Automate Designer Feedback_carousel.jpg

Help make Flow Design easier

Are you new to designing flows? What is your biggest struggle with Power Automate Designer? Help us make it more user friendly!

Users online (2,002)