Managed Private Endpoint - Synapse to Azure SQL Managed Instance

Question

Managed Private Endpoint - Synapse to Azure SQL Managed Instance

Josh Ashwood 96

Does Synapse Analytics support creating a private endpoint to Managed Instance?

We only see Azure SQL here, not Managed Instance

https://learn.microsoft.com/en-us/azure/synapse-analytics/security/how-to-create-managed-private-endpoints

How could we connect a Synapse notebook to a Managed Instance with public network access disabled?

User's image

Accepted answer

1 additional answer

Your answer

Answer 1

Vinodh247 34,256 MVP Volunteer Moderator

Hi Josh Ashwood,

Thanks for reaching out to Microsoft Q&A.

I don't see any official docs mentioned about this, but I believe you can achieve this. You might need to configure a private endpoint for the Managed Instance and ensure that the synapse workspace is correctly set up to access resources within the same VNet or a peered VNet.

Try the following steps and let me know

After creating private endpoint for your managed Instance...

configure your custom DNS solution to resolve the private endpoint's FQDN to the private IP address
Ensure that your Synapse workspace is deployed within the same VNet or a peered VNet where the Managed Instance's private endpoint exists. Configure the Synapse workspace to use the managed private endpoint for communication with the Managed Instance
In your Synapse workspace, navigate to the "Manage" hub --> security -->select "Managed private endpoints."
Click on New to create a new managed private endpoint. Follow the wizard to specify the target resource (Managed Instance)

Now use the appropriate connection string in your Synapse notebook, ensuring that the connection string targets the private endpoint's fqdn.

Note: Make sure that the network security groups (NSGs) and firewall rules allow the necessary traffic between Synapse and the Managed Instance.

Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.

Josh Ashwood 96 Reputation points

2024-07-18T00:58:51.3866667+00:00

Thanks for your response
"Ensure that your Synapse workspace is deployed within the same VNet or a peered VNet where the Managed Instance's private endpoint exists."
Is it possible to deploy a synapse workspace to a customer created VNET ? I thought we could only deploy it to a managed vnet, created when synapse is deployed?
Josh Ashwood 96 Reputation points

2024-07-18T01:01:51.2933333+00:00

"Ensure that your Synapse workspace is deployed within the same VNet or a peered VNet where the Managed Instance's private endpoint exists"

I can't see how it is possible to do this? I thought we could only deploy Synapse into a managed VNET - not a VNET of our own making?
Vinodh247 34,256 Reputation points MVP Volunteer Moderator

2024-07-18T01:06:24.9733333+00:00
If you want your Synapse workspace to use a customer-managed vnet, you can configure this during the workspace creation process. This allows you to control and manage the network configuration, security, and routing.

az synapse workspace create \ --name MySynapseWorkspace \ --resource-group MyResourceGroup \ --storage-account MyStorageAccount \ --file-system MyFileSystem \ --sql-admin-login-user adminuser \ --sql-admin-login-password mypassword \ --virtual-network MyVNet \ --subnet MySubnet

you may have to add/modify steps to complete this but hth to answer your question.
Vinodh247 34,256 Reputation points MVP Volunteer Moderator

2024-07-18T01:09:59.49+00:00

you must use the managed VNet provided by Synapse and then set up necessary networking configurations to connect it to other resources. The solution involves using Virtual Network Peering to connect the managed VNet of the Synapse workspace to your customer-created VNet where the Managed Instance resides. I know this is a constraint but there is no direct method.

Answer 2

Josh Ashwood 96

Sorry I think the documentation is just out of date! I spun up a new Synapse workspace and Managed instance is in the list...

On the left is the screenshot from https://learn.microsoft.com/en-us/azure/synapse-analytics/security/how-to-create-managed-private-endpoints

On the right is the real world
User's image

Share via

Managed Private Endpoint - Synapse to Azure SQL Managed Instance

1 additional answer

Your answer