MS Fabric Private Endpoint to Azure Function hosted on ASE

Question

Hi,

I would like to call REST APi from MS Fabric notebook to Azure Function. But Azure Function is hosted on App Service Environment (ASE) (so azure function that is not publicly available and it's basically deployed directly to subnet). Is it possible to create managed Private Endpoint in MS Fabric workspace to this Azure Function?

I have tested that is is possible when the Function is hosted on Premium plan but if we use ASE and have isolated v2 plan, will it works?

Thanks

Answer 1

Hello @David Tomandl

Yes, it is possible to create a managed Private Endpoint in MS Fabric workspace to an Azure Function hosted on an App Service Environment (ASE).

However, there are some prerequisites and limitations that you need to consider.

Firstly, you need to make sure that your ASE is configured to use an internal load balancer (ILB) ASE. This is because Private Endpoints can only be created for ILB ASEs, not for external ASEs.

Secondly, you need to make sure that your Azure Function is deployed to a subnet within the ILB ASE. This subnet should not have a network security group (NSG) attached to it, as NSGs can block traffic to the Private Endpoint.

Once you have met these prerequisites, you can create a Private Endpoint for your Azure Function in the same virtual network as your MS Fabric workspace. You can then use the Private Endpoint's private IP address to call the Azure Function from your MS Fabric notebook.

---

NOTE 📝

There are some limitations to using Private Endpoints with ASEs. For example, you cannot use Private Endpoints with the Isolated v2 plan, as this plan does not support ILB ASEs. Additionally, you cannot use Private Endpoints with the Consumption plan, as this plan does not support VNet integration.

---

I hope this helps.