We recently had a fruitful meeting with a customer who is evaluating K2 Cloud.
They have an existing Azure subscription and they are currently using it as AD.
They are also going to use it to host their SQL database through Azure SQL Database service.
However they are concerned about securing their data while in transit from our K2 Cloud to their Azure SQL database cloud.
I did some research on this and found that we can secure the connection through the following methods:
- Allow access to Azure services – accept incoming traffic only from Azure IPs and subnets
- IP address whitelisting – requires a static IP address from us (K2 Cloud)
- VNet to VNet VPN – most secure according to this article from MS
My questions are:
- For option 2, I’d like to confirm if we can provide a static IP address for K2 Cloud (I read that we can here)?
- For option 3, I’d like to confirm if we can configure K2 Cloud for cloud to cloud data connection via Site-to-Site VPN, given of course that the customer already has their own Azure VNet?
- In general, what is the most secure way for cloud to cloud transmission? Any other way we can recommend?
Thanks all!