Disable public access

If you disable public access, connectivity to the server is only possible via private endpoints.

You must configure those private endpoints so that hosts that can route traffic to the Azure virtual network in which you inject the private endpoints, can access your Azure Database for PostgreSQL flexible server.

When public access is disabled, any firewall rules you created while public access was enabled, aren't enforced.

Also, any modifications made to the firewall rules are discarded.

Portal

Using the Azure portal:

1. Select your Azure Database for PostgreSQL flexible server.

2. In the resource menu, select Overview.

   

3. The status of the server must be Available, for the Networking menu option to be enabled.

   

4. If the status of the server isn't Available, the Networking option is disabled.

   

Note

Any attempt to configure the networking settings of a server whose status is other than available, would fail with an error.

5. In the resource menu, select Networking.

   

6. Clear the Allow public access to this resource through the internet using a public IP address checkbox.

   

7. Select Save.

   

8. A notification informs you that the changes are being applied.

   

9. Also, the status of the server changes to Updating.

   

10. When the process completes, a notification informs you that the changes were applied.

    

11. Also, the status of the server changes to Available.

    

CLI

You can disable public access on a server via the az postgres flexible-server update command.

az postgres flexible-server update --resource-group <resource_group> --name <server> --public-access disabled

If you attempt to disable public access on a server which isn't in Available state, you receive an error like this:

Code: 
Message: Server <server> is busy with other operations. Please try later

If you attempt to disable public access on a server which wasn't deployed with networking mode public access (allowed IP addresses), you don't receive an error. The request to change that configuration is ignored.

To determine if a server has public access disabled or enabled, run the following command:

az postgres flexible-server show --resource-group <resource_group> --name <server> --query '{"publicAccess":network.publicNetworkAccess}'

Related content

• Networking.
• Enable public access.
• Add firewall rules.
• Delete firewall rules.
• Add private endpoint connections.
• Delete private endpoint connections.
• Approve private endpoint connections.
• Reject private endpoint connections.