I am building an Azure website that talks to a SQL Server in an Azure Windows Server VM. Do I need that VM to be inside a virtual network for it to be secure? I hope not, because that will mean quite a lot of hoops.
While I can establish point-to-site for my Azure website to talk to it (and myself from my local SQL Server Management Studio), this still presents a problem:
I plan for my users to mostly access data via the website. However, some modern Windows apps that we're developing will need to upload and download data obviously not via the web user interface (backend/behind the scenes). I don't want those modern Windows machines to have to be configured for point-to-site if possible.
I suppose I could create and expose a web service? Not sure.. looking for advice/best practices.
Thanks.