Private Link / Private Endpoint
Private access to Azure data services
Overview
We place Private Endpoints on the data services that must not be reached from the public internet: storage, SQL, Key Vault, and the analytics workspaces in scope. DNS zones are linked to the VNets that need them, and we test resolution from a VM or a pipeline runtime inside that network.
Public network access is disabled only after private access works, including for Microsoft-hosted integration runtimes that need a different pattern. Exceptions stay on a list with an owner and a review date.
What we deliver
- Private endpoints for the storage, data, and key services in scope
- Private DNS zones linked to the VNets that consume them
- A resolution test from the network where pipelines and users sit
- Public access disabled, with any exception listed and owned
Business benefits
- Data services are reached over your network, not over a public endpoint
- DNS is part of the design, so names resolve for the people who must connect
- Remaining public endpoints are explicit exceptions, not oversights
Typical use
Private access to Azure data services
Related services
Contact
Let's talk about your Azure project
We're a real team, not bots. Send a few details and we'll reply within one working day.
