Eliminate public network exposure of Azure PaaS services
Intermediate
Security Engineer
Azure
Azure Private Link
Azure Virtual Network
Microsoft Defender for Cloud
Eliminate public network exposure of Azure PaaS and AI services using private endpoints and Azure Private Link, then enforce adoption at scale using Azure Policy and Defender for Cloud.
Learning objectives
After completing this module, you'll be able to:
- Assess the attack surface created by public PaaS service endpoints in an Azure environment
- Configure private endpoints to route access to Azure PaaS and AI services over a private network
- Configure Azure Private Link service to expose internal services without creating a public endpoint
- Enforce private endpoint adoption at scale using Azure Policy and Defender for Cloud
Prerequisites
- Familiarity with Azure virtual networks and DNS concepts
- Understanding of Azure PaaS services such as Storage, SQL Database, Key Vault, and Azure OpenAI at a conceptual level
- Basic understanding of Azure Policy and Defender for Cloud
Get started with Azure
Choose the Azure account that's right for you. Pay as you go or try Azure free for up to 30 days. Sign up.