Private Endpoints with Azure Storage File Shares

Azure services are publicly available over the internet by default. That works for many services, but sometimes we need to limit access to internal networks only. Private Endpoints provide a local, internal connection to resources in Azure. It does this by adding a virtual NIC to a subnet. From there, the NIC gets a private IP address where it can be accessed from the internal network. This video goes over the configuration options to create a new storage account with an Azure File Share Private Endpoint as well as update an existing storage account with a private endpoint.
00:00 - Start
02:31 - Create the Storage Account
04:32 - Enable Large File Share Support
05:43 - Configure DNS
08:59 - Convert Existing File Share
Links
Zero to Hero with Azure Virtual Desktop
www.udemy.com/course/zero-to-...
Hybrid Identity with Windows AD and Azure AD
www.udemy.com/course/hybrid-i...
Private Endpoints and DNS in Azure
• Private Endpoints and ...

[@gihanw220]

Good stuff man, I love the little nuggets of information you randomly include. I had a pretty good idea about private endpoints but I came here to refresh my memory and I was pleased at how you broke it down clearly. Great job. Keep it up!!👍🏻

[@nepsky]

Great content. Keep up the good work with Azure Networking resources

[@chatsifieds]

great stuff!

[@ghaithbitar3634]

i like you travis!!!!! thank you a lot from my heart for these useful Videos !!!

[@prashantgajjar8923]

You are awesome..

[@ronnieoverby]

Very useful info. One thing that was tripping me up was that I didn't realize that a private endpoint per sub resource type was needed (ie. blobs vs. file)

[@Ciraltos]

Glad it was helpful!

[@RicardoJosue]

Hi great Video, how connect to private enpoint from my local machine for execute net use... ?

[@Ozzyorcborne1]

Excellent video. I had a question regarding private endpoints. Can you AD domain join the azure file share using private endpoints? and if yes, should it be done before or after running the azfileshybrid commands to join the fileshare to the domain? I would like to set up ACLs on the fileshare but id rather not give it a public endpoint.

[@mtzaroon]

How fileshare works with function for deployment of function over endpoint.....struggling a lot in this issue..

[@LandscapeInMotion]

Great explanation! Can the Dataverse "Synapse Link" (exports data to data lake, and creates Synapse database), access a Private Endpoint storage account so it can write to the data lake? Also, is this secure? I think all data is encrypted at rest.

[@dtroxx007]

You should configure Azure privatedns using a conditional forwarder to the dc's in the hub.

[@subscription1210]

Thanks for the video. What if I don’t have the dns server because our environment is cloud only? Where should I add these dns records

[@uzairahmed09]

Did you get the answer on any forum?