Azure Automation Account private endpoint

Question

I want to have an automation account that runs a powershell script on a daily schedule. However I need to work with private resources and therefore need to enable a Private endpoint on the Automation Account. There are two possibilities - DSCandHybridWorker and Webhook. I think webhook is the right option since DSCandHybridWorker seems to be the use case when a user hosted VM is used. But Webhook description says it needs an external trigger to start. I just want to run the script on a schedule. Can I still use the webhook option?

Answer 1

Since you want to run a script on a daily schedule within a private network, you should use a Private Endpoint along with the Azure Automation account directly or consider deploying a Hybrid Runbook Worker if the script needs to interact with resources that are not directly accessible by the Automation Account.

here are some links those can help you

https://learn.microsoft.com/en-us/azure/automation/automation-private-link

https://learn.microsoft.com/en-us/azure/automation/automation-hybrid-runbook-worker

https://jasonmasten.com/2021/04/13/tenant-id-application-id-principal-id-and-scope-are-not-allowed-to-be-updated/