Azure resources cannot communicate after setting up private endpoints

Question

I have set up private endpoints for Azure OpenAI and Azure AI Search within a virtual network with a private link service. However, even though I can call each service separately from a VM within the network, OpenAI seems unable to reach AI Search. The issue is resolved once I make AI Search public, but this conflicts with my requirement of keeping both resources within a private network. What can be causing this communication problem?

Answer 1

Thanks for the question, To allow access to your Azure AI Search resource from Azure OpenAI resource, you need to submit an application form. The application will be reviewed in 10 business days and you will be contacted via email about the results. If you are eligible, we will provision the private endpoint in Microsoft managed virtual network, and send a private endpoint connection request to your search service, and you will need to approve the request. Here are the steps to Disable public network access. You can disable public network access of your Azure AI Search resource in the Azure portal. To allow access to your Azure AI Search resource from your client machines, like using Azure OpenAI Studio, you need to create private endpoint connections that connect to your Azure AI Search resource. The private endpoint resource is provisioned in a Microsoft managed tenant, while the linked resource is in your tenant. You can't access the private endpoint resource by just clicking the private endpoint link (in blue font) in the Private access tab of the Networking page. Instead, click elsewhere on the row, then the Approve` button above should be clickable. Learn more about the manual approval workflow.

Answer 2

Hello chaymr,

To access Azure AI Search privately through Azure OpenAI, as mentioned in the "On Your Data" documentation, you must submit an application form and await a review within 10 business days.

Best regards,
Charlie

---

If you find my response helpful, please consider accepting this answer and voting 'yes' to support the community. Thank you!