How to connect and deliver services privately on Azure with Azure Private Link | Azure Friday

[@mikesmith2315]

Narayan Annamalai explains these concepts in a very good manner. Brilliant teacher. Thankyou.

[@DeepakShaw]

Thanks, I have been looking for PaaS connectivity over the private network. Need to see some more demos with logic apps and Azure function.

[@sarathfromsaudi]

Awesome explanation. Thanks Narayan

[@snmailist1470]

My question is how about connecting SQL Server from local machine to Azure SQL Server (if the Sql Server has had 'Private Link') ?

[@DDD00007]

Great! Well explained

[@sabarishi4581]

Really it's make more secure !!!

[@srivastasripada5180]

How about accessing any Azure Resources (PaaS) connecting privately, for example Azure Batch private endpoints connecting privately to Azure Storage account (blob/Files), not discussed in this video. Both the Private end point are with in the same VNET

[@vamseekonda3023]

Great explanation. Thanks

[@Marcel-dt5du]

Thanks for that detailed explanation! Are there any disadvantages? Maybe with regards to scaling or access performance?

[@bgddev]

How would you compare this to the Application Service Environment? Can you create a video about this?

[@aks541]

Thanks for the video. If I add system assigned managed identity for an ADF pipeline in this ADLS Gen2 (where you enable access via private end point), can ADF extract the files from the blob?

[@atal_ab]

nice explination

[@darkMuffin31]

Storage sub-resource didn't make any sense to me :( blob? where do you get that?

[@MicrosoftAzure]

Hello there! Sub-resources are actually different storage services in Azure. They are Blob, Queue, Table, Files and Disks as documented here: msft.it/6052T2W5C
A private endpoint maps to a resource of specific storage service type.

[@sarkershahin4543]

Awesome!

[@luismesagrave]

Ok, but who accesses storage accounts or sql ddbbs in production from VMs? I'm surprised the obvious scenario hasn't been discused: what about service-to-service access? how to access from an app service or a function, either a storage, sql, or another app service? is that even in the roadmap??

[@MicrosoftAzure]

Hey Luis!
WebApps or Functions can be deployed privately using VNet Integration to gain private access to other PaaS like Storage accounts or SQL servers using Private Endpoints, in this case both App Service and Data resources are private to the VNet. More information here: msft.it/6056TtqQk
Additionally, you can access the WebApp privately to completely secure the integration if is an exclusive private application. Here's how! msft.it/6058TtqQw

[@2manjunath]

@@MicrosoftAzure private link for azure datafactory not working , I am trying to connect datafactory private link to onperm self hosted integration runtime, no success, even there is no proper documentation for the datafactory to connect with private link

[@sau002]

Does this work to secure a Storage account for a remote employee who are using Azure Storage Explorer and their laptop is connected via Point-2-site VPN gateway ?

[@MicrosoftAzure]

Hey there Saurabh! Yes, this should work in that scenario.

[@SivaSakthi-iy6ck]

This is great

[@anands2239]

private endpoint and private link arent they different.