Hi @sakuraime ,
Thanks for using Microsoft Q&A !!
When a VNET (technically, a subnet) which has Service Endpoint enabled for Azure.Sql, is added to the list of subnets allowed to connect to SQL. As such, it is mutually exclusive from the list of firewall rules which exist for public connections.
Basically, to allow list all traffic from a subnet to SQL Db it's a two step process i.e.
- Enable Service Endpoints on the subnet with Microsoft.Sql
- On the SQL Database --> Firewalls, add a new Vnet firewall rule referencing that Vnet and Subnet.
And such VNET firewall rules can be enumerated via. API and CLI as well. PowerShell example:
Please let me know if you have any other questions.
Thanks
Saurabh
----------
Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.