Hi,
I am working on a project wherein we will deploy Storage Account, KeyVault, ServiceBus, CosmosDB, and SQL DB in our subscription. All these services will be deployed with public access enabled, and we will only add private endpoints for local VNet traffic.

From a security perspective, should I explicitly add DDoS protection to the above-mentioned services, or do they come with built-in DDoS protection?

Example: Would a DDoS attack be able to bring down a Storage Account Blob Service (test.blob.core.windows.net)?

​Hi,I am working on a project wherein we will deploy Storage Account, KeyVault, ServiceBus, CosmosDB, and SQL DB in our subscription. All these services will be deployed with public access enabled, and we will only add private endpoints for local VNet traffic.From a security perspective, should I explicitly add DDoS protection to the above-mentioned services, or do they come with built-in DDoS protection?Example: Would a DDoS attack be able to bring down a Storage Account Blob Service (test.blob.core.windows.net)?  Read More

​