I would like to create an Azure SQL Database and be able to query it only from within the Azure Resource Group to which it is assigned. We want to keep access to the data as locked down as possible. So, connecting to it via SSMS on my PC after setting up a firewall would not be an option. I had thought of Query Editor from within the Azure portal, but it seems that that too is accessing the database from my PC and requires a firewall to be put in place.
I suppose I could create a virtual machine with SQL Server and SSMS installed, but that seems like overkill.
Does anyone have any suggestions?