# azure


10/17/2023, 8:59 AM
Hello 👋 I have an Azure App Config with a private endpoint and disabled networking (so only private endpoints can be used). Is Pulumi able to update key/values using the private endpoints and not the public REST APIs ? (Forbidden access is returned when trying "pulumi up" because logs show pulumi using public APIs) PS: The machine running pulumi is in the right VNET with peering and DNS configured as necessary
The only workaround I was able to find so far is to use Pulumi Local Command and run "az" CLI to update the App Config, which uses the private endpoints as it should