How to connect and deliver services privately on Azure with Azure Private Link | Azure Friday

Narayan Annamalai joins Donovan Brown to introduce Azure Private Link. In this episode, Narayan demonstrates how you can secure Azure PaaS resources and your Azure network using Private Link and provide protection against data exfiltration.
8:45 - Demo
Azure Private Link overview
aka.ms/azfr/610/01
Azure Private Link documentation
aka.ms/azfr/610/02
What is Azure Private Endpoint?
aka.ms/azfr/610/03
Create a free account (Azure)?
aka.ms/azfr/610/free
#microsoft #microsoftazure

[@mikesmith2315]

Narayan Annamalai explains these concepts in a very good manner. Brilliant teacher. Thankyou.

[@DeepakShaw]

Thanks, I have been looking for PaaS connectivity over the private network. Need to see some more demos with logic apps and Azure function.

[@Marcel-dt5du]

Thanks for that detailed explanation! Are there any disadvantages? Maybe with regards to scaling or access performance?

[@DDD00007]

Great! Well explained

[@vamseekonda3023]

Great explanation. Thanks

[@aks541]

Thanks for the video. If I add system assigned managed identity for an ADF pipeline in this ADLS Gen2 (where you enable access via private end point), can ADF extract the files from the blob?

[@sarathfromsaudi]

Awesome explanation. Thanks Narayan

[@sabarishi4581]

Really it's make more secure !!!

[@bgddev]

How would you compare this to the Application Service Environment? Can you create a video about this?

[@SivaSakthi-iy6ck]

This is great

[@srivastasripada5180]

How about accessing any Azure Resources (PaaS) connecting privately, for example Azure Batch private endpoints connecting privately to Azure Storage account (blob/Files), not discussed in this video. Both the Private end point are with in the same VNET

[@sarkershahin4543]

Awesome!

[@snmailist1470]

My question is how about connecting SQL Server from local machine to Azure SQL Server (if the Sql Server has had 'Private Link') ?

[@atal_ab]

nice explination

[@sau002]

Does this work to secure a Storage account for a remote employee who are using Azure Storage Explorer and their laptop is connected via Point-2-site VPN gateway ?

[@MicrosoftAzure]

Hey there Saurabh! Yes, this should work in that scenario.

[@darkMuffin31]

Storage sub-resource didn't make any sense to me :( blob? where do you get that?

[@MicrosoftAzure]

Hello there! Sub-resources are actually different storage services in Azure. They are Blob, Queue, Table, Files and Disks as documented here: msft.it/6052T2W5C
A private endpoint maps to a resource of specific storage service type.

[@luismesagrave]

Ok, but who accesses storage accounts or sql ddbbs in production from VMs? I'm surprised the obvious scenario hasn't been discused: what about service-to-service access? how to access from an app service or a function, either a storage, sql, or another app service? is that even in the roadmap??

[@MicrosoftAzure]

Hey Luis!
WebApps or Functions can be deployed privately using VNet Integration to gain private access to other PaaS like Storage accounts or SQL servers using Private Endpoints, in this case both App Service and Data resources are private to the VNet. More information here: msft.it/6056TtqQk
Additionally, you can access the WebApp privately to completely secure the integration if is an exclusive private application. Here's how! msft.it/6058TtqQw

[@2manjunath]

@@MicrosoftAzure private link for azure datafactory not working , I am trying to connect datafactory private link to onperm self hosted integration runtime, no success, even there is no proper documentation for the datafactory to connect with private link

[@anands2239]

private endpoint and private link arent they different.