Need to verify if my understanding is correct.

Question

I just want to check if my understanding is correct. Say I have an app service, storage account and SQL server in azure and i have put these resources in vnet. if i want to expose the web app running in app service to internet, I have to use a service endpoint where as if i want the web app to be available to any user within the internal network, i can use a private link with appropriate DNS configuration.

Answer 1

Hey there, vijaiya prathap

Thats a great question and thanks for using the QandA platform

I guess your understanding is pretty close! So, if you've got an Azure App Service, a storage account, and a SQL server all tucked into a virtual network (VNet), you're already doing a great job with network security.

Now, if you want your web app to be accessible to users over the internet, you're good to go by default – no need for service endpoints or private links there. Azure App Service is designed to be internet-accessible out of the box.

However, if you're looking to keep things reallyr secure within your network, that's where things like service endpoints and private links come into play. Service endpoints help lock down specific Azure services so they're only accessible from designated subnets within your VNet. Private Link, on the other hand, creates a private endpoint within your VNet, allowing for super-private access to Azure PaaS services like your web app.

So, bottom line, if you want your web app to stay goood within your internal network, private links with the right DNS setup will do the trick.

If this helps kindly accept the answer thanks much.