Azure - Subnet dedicated to a service

Aliya 21 Reputation points
2021-10-26T12:50:08.633+00:00

Hi everyone, I have a question related to a "dedicated" subnet in Azure (not sure it's an appropriate term to it). Worth noting that I'm not talking about subnet delegation.

Here is link to official documentation, where I was able to find info about services, which can have dedicated subnets :
https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-for-azure-services

I'm new to Azure, so perhaps here is someone who knows this topic well and any info or direction to an interesting blogs/documentation about this particular topic will be appreciated. Unfortunately, couldn't find more detailed info myself.

Specifically, I'm interested in how to identify this type of dedicated subnets? (here I can give an example of what exactly i mean. In case of delegated subnet - there are specific property, which allows to identify delegated subnets.). What policy/rule (or perhaps smth else) doesn't allow to create another type of service within that subnet?

P.S. couldn't find more appropriate tags, so i added couple of services, which have a dedicated subnets.

Looking forward to your replies,

Aliya

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
578 questions
Azure Bastion
Azure Bastion
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.
243 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,178 questions
{count} votes

Accepted answer
  1. SaiKishor-MSFT 17,201 Reputation points
    2021-11-01T16:46:11.457+00:00

    @Aliya When a subnet is used for an injected service it is delegated to that service and you can see that info in both portal and CLI as shown below:
    145486-delegated.png

    We have a block in Azure that prevents customers from creating anything else in that subnet. It’s a property of the subnet that cannot be modified. It is not a policy that is visible to the customer.

    Hope this helps. Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

    Remember:

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

    Want a reminder to come back and check responses? Here is how to subscribe to a notification.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful