Exploring Cost-Effective Solutions for Routing Traffic from an Azure Private Endpoint to a VPN Gateway
Greetings, I would appreciate assistance with a design to a solution I would like to implement on Azure. Below I summarized all the information and approaches I tried. Customer has a private endpoint on a "consumer" VNet, from which I…
Storing Azure Metrics in Private Storage Account Using Azure Automation
I want to retrieve metric values using Get-AzMetric in Azure Automation and store the daily updated values in an Azure Storage Account. However, the Storage Account is configured with a private link and can only be accessed through a specified network,…
Private link service multi tenant and best practice
Hi guys, I have a tenant with a storage service that is accessible via private endpoint, an external vendor (who also have a tenant on Azure) needs to be able to access my storage account (just this one) without going through the Internet, so I was…
How to change networking to connect IoTHub to CosmosDB in private subnet
Hey community! The question: How do I connect my Azure IoTHub to my CosmosDB in private subnet? How I can change the CosmosDB networking/firewall settings to accept traffic coming from a (public) IoTHub service endpoint? Brief description: I have an…
Unable to bypass network traffic through firewall, if private link is configured for storage account.
I have a firewall configured in subnet x in my vnet. I also have an aks cluster launched in the same vnet, within subnet y. I have configured a private endpoint for a storage account, and am trying to access the same from my aks subnet, which is…
User can't see any resource types in the resource type list when trying to create a private endpoint
I have a user who is trying to setup a private endpoint on a keyvault in Azure. We have setup a development subscription and resource group for him to use. We don't want to give him full access to the subscription, but want him to be able to manage…
How to connect Private-Link resource to a VPN gateway?
Greetings, I would appreciate assistance with a design to a solution I would like to implement on Azure. Below I summarized all the information and approaches I tried. Customer has a private endpoint on a "consumer" VNet, from which I…
Azure Virtual Desktop: Error: "Connection was refused because you tried to access a private endpoint resource without being connected to the private endpoint."
I am setting up Azure Virtual Desktop. Host Pool Type is Pooled, Application Group has only one application - just the "Session Desktop". When I enable "Private Link" and "Disable Public Access" (AVD workspace: Global &…
What is the supported way to set up privatelink DNS for Azure Data Factory Studio
Hi! When using the Azure Data Factory Studio to edit an ADF the URL for the studio is adf.azure.com in public DNS this resolves with a CNAME to portal.privatelink.adf.azure.com, which in turn resolves to a CNAME datafactoryv2.trafficmanager.net. So a…
Azure CI/CD Pipeline With ACR Private EndPoint
Hi Everyone, We have created an Azure DevOps pipeline and releases for CI/CD and we're using Azure container registry(ACR) for pulling/pushing the docker images, these pipelines/releases working and are able to pull/push the images without an issue as…
How do I use a private dns zone or custom record or private IP to connect to Azure Key Vault and Azure Storage with https over private endpoint?
This question applies to both Azure Key vault and Azure Storage, but I'll be demonstrating with just the key vault to give a tangible example. I have a node app running on a VM and another in a Container Apps environment. I want to grant them the ability…
Azure Private Link with ARM or Bicep - Private Dns Zone Group does not create A records
Hi, I seem to run into an issue when deploying a private endpoint for Azure Event Hubs or Azure Redis Cache (on the same tenant and subscription). I'm automating the deployment with bicep templates (see below), and I deploy a "Private Dns…
Is it true that data transfer is more expensive when using private endpoint?
Hi all, We have a storage account and a AKS cluster in same datacenter. We are transferring more than 10 TB data each month and its increasing every month. Originally we connected the AKS cluster to the storage account using the public endpoint and where…
Network Connectivity required between Azure PaaS services (like Storage Account) and Azure Log Analytics workspace for sending diagnostics logs
Hi, I want to send diagnostic logs from Azure PaaS service like storage account to a Log Analytics Workspace. I want to keep the network connection private. Is it possible to have a control over the network this traffic uses? Documentation shows that a…
Single Subnet vs Separate Subnets for Private Endpoints
Hi We're building various services in Azure (Logic App, Function App, Storage Account, Event Grid, Event Bus, Service Bus, and APIM). These services will be enabled with a Private Endpoint (PE) and all the public endpoint connectivity will be disabled.…
If we enable the private endpoints for storage account, can't we able to access storage account by using VNETs
I have a storage account (stgA) with its networking set to "Enabled from selected virtual networks and IP addresses." I've successfully added VNETA to access stgA, and I can access the storage from the VNET. However, after creating a private…
Connection issues with multiple private endpoints for a single resource
The architecture explanation is complex so read carefully I have a SQL server in East US region that I want other services to connect to privately, other services includes: AKS App services (both web and function apps) AKS is in West US 2 so I…
Azure private endpoint conflict
Hey, I have a private storage account I want to access through private endpoint. I have 2 different vnets and each of them in different resource groups, each resource group has its own dns zone which is the default privatelink.blob.core.windows.net . is…
Resolving DNS names for Azure private endpoint of another company, when using private endpoint ourselves
Hello, It was hard to find an explicit title for that issue... We got a DNS server hosted in Azure which serves as a relay/conditional forwarder for the private DNS zones we have in our Azure tenant. Following the Microsoft documentation for…
Azure CLI - Cannot create private endpoint for Application Gateway, although private link exists
I'm trying to create a Private Endpoint for an Azure Application Gateway in my environment, but I keep getting the following error, although the private link exists and is in "Succeeded" state: ERROR:…