Hello, I have some questions regarding integrations with Azure Storage when HIPAA mode is enabled.
HIPAA and HITECH regulatory requirements mean that Storage Accounts cannot have unguarded public access (see:
https://learn.microsoft.com/en-us/azure/storage/common/security-controls-policy). However, it looks like there are no published static IPs for VAPI that I can use to whitelist access to the storage account. I tried to use SAS, but this doesn't seem to work as I can't even add the integration, as it responds with an "Upload Failed" message (I'm assuming that it tries to perform a test upload). I initially tried with permissions restricted to only Writing, Adding, Creating, and Updating. I subsequently allowed all permissions, and even with that the integration cannot be added. It looks like the only approach that works is to provide the account key connection string. This is less secure, because leaked credentials implies full access. Does VAPI not support integration to Azure Storage Account with SAS?