Securing access to the Azure SQL Server Database via SSMS using Privatelink ?

Question

My company already using the Azure Express route circuit to allow secure and quicker data access across the WAN.

I am trying to secure access to my SQL database in Azure from my user laptop across the globe.

1. Turn off the Public Endpoint for all SQL database server.
2. Enable the Private Endpoint for each SQL database server.
3. Create the privatelink.database.windows.net Forward Lookup Zones in the Internal DNS server.

Is there any better way of doing this or the above steps are the best practices ?

Answer 1

@EnterpriseArchitect

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Your exact requirement is documented here

The steps you have specified are correct except for one step.

• The only change you must make note is that,
• You should use "database.windows.net" instead of "privatelink.database.windows.net" Forward Lookup Zone

Kindly let us know if this helps or you need further assistance on this issue.

P.S: In case you are planning to use P2S and not ExpressRoute, please do let me know as that would require some additional configurations

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.