46 questions
0
votes
1
answer
67
views
How to deploy app service with private endpoint and custom domain in a self hosting devops agent
I have an Azure App Service which is protected via private end point and network is disabled. Also it has a custom domain which is just in company network reachable, also inside of devops agent.
I ...
- 1,806
0
votes
1
answer
139
views
Building a mapping of Azure private link DNS zones and private endpoint groupIds
This question is really about automation. I could easily do this manually in less time then it will take me to wait for an answer, but I think automation might be neater in the long run. I am ...
- 103
0
votes
1
answer
92
views
Azure Elastic Private Link Traffic Filtering - Cannot Resolve Private Zone
I am attempting to set up Private Link Traffic Filtering with Azure and Elastic. I have completed steps 1, 2, 3, and 4 of this document. I have confirmed the following:
The private link is accepted.
...
- 4,678
1
vote
1
answer
156
views
Private KeyVault secret reference from Function Apps in multiple VNets in the same resource group
I have setup a single KeyVault and 2 Function Apps using Bicep. To test I build the bicep and input the ARM template into "Deploy custom template" on Azure portal.
KeyVault deployed with ...
- 145
-1
votes
1
answer
909
views
Azure App Service Private Endpoint, returning 404
I'm trying to access my Azure App Service via a private endpoint within a Virtual Network using the private DNS name (eg, mywebapp.privatelink.azurewebsites.net). The DNS resolution works correctly, ...
- 1
0
votes
1
answer
176
views
Apim (private endpoint) named value, keyvault secret 404
I have an apim with a private endpoint. This is my code:
resource "azurerm_private_endpoint" "apim" {
name = "${var.organization}-apim-pep-${var.environment}&...
- 392
0
votes
1
answer
1k
views
How to redirect request of private Azure Key Vault vault.azure.net domain to private dns zone or private ip configured in private endpoint?
I have a private dns zone for a key vault named privatelink.vaultcore.azure.net. Inside it, I added a record for a private endpoint that is connected to a key vault with public access disabled.
I also ...
- 11
0
votes
1
answer
144
views
Private and Service Endpoints together
I have a requirement to configure both Private and Service endpoints on Azure SQL firewall.
Here is a quick simulated scenario
Scenario 1:
Subnet1 of VNet 1 is configured with Azure SQL service ...
- 1,005
-1
votes
1
answer
693
views
Creating Private Dns zone group automatically creates a record [closed]
I am creating a private endpoint, dons zone group, and adding a record for the resource in dns zone using azure cli but it is giving an error in adding a record task, I think while creating dns zone ...
3
votes
1
answer
1k
views
Cannot find a read write access key for the Azure App Configuration while importing keys
I am trying to import App configuration key values using DevOps CICD Pipelines. App configuration had
Private Endpoint enabled, disabled public access. private DNS zone contains A recordset of app ...
- 1,095
0
votes
1
answer
802
views
Can't disable the firewall bypass option for trusted Microsoft services when using Azure Key vault
I set up an Azure key Vault with a private endpoint and no public access. I also enabled the option to "Allow trusted Microsoft services to bypass this firewall". However, I can't disable ...
- 1,095
0
votes
1
answer
1k
views
VNET Peering and Private DNS zone
I have very specific question and hope to get some answers.
Below is my situation,
I have three VNET.
VNET1: Has storage account with public access disabled(blob anonymous access disabled). The same ...
- 743
0
votes
2
answers
2k
views
Azure VNet peering with Private Link
I have two VENT one for Virtual machine and another for Storage account. Both VNET have been paired successfully. Storage account have been disable public access and has Private Link enabled with ...
- 743
0
votes
1
answer
227
views
need to combine two queries to set up an alert for private endpoint creation or modification in subnets with disabled privateEndpointNetworkPolicies
I want to join two queries so that I can create an alert for the creation or modification of private endpoints attached to a subnet where privateEndpointNetworkPolicies is disabled.
`arg("")....
0
votes
1
answer
1k
views
Azure Private Link access to a CosmosDB for MongoDB database from a peered VNET
I am trying to configure an Azure Private Link access to a CosmosDB for MongoDB database from a different peered network but this is not working for me. I have the exact same configuration for a SQL ...
- 11
0
votes
1
answer
2k
views
Why should I use Microsoft recommended names for Azure private DNS Zones
MS recommends to use very specific names for Azure Private DNS Zones dependent on the platform service it is actually used for: https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-...
- 39
2
votes
2
answers
2k
views
Connect to private Azure Container Instance
I've a private Azure Container instance running that is part of a Virtual network. I need to connect to that ACI from a public Azure App Service app, which I also added to the same Virtual network.
I ...
- 21
0
votes
1
answer
2k
views
Azure SQL Server VNet integration fails as soon as private endpoint is created
Looks like VNet integration for Azure SQL Server breaks as soon as the VNet is connected to a private DNS service and that SQL Server has a private endpoint in a different VNet.
The problem starts ...
8
votes
1
answer
2k
views
Frontend app service calling a backend app service in a VNet with private endpoint returns 403 IP forbidden error
I'm trying to secure an application, deployed in Azure, consisting of an Angular frontend and a Node (Nest.js) backend. I want the frontend to be accessible via the internet unlike the backend which ...
- 83
3
votes
1
answer
9k
views
Azure: How do I associate the private DNS zone with virtual networks across the subscriptions?
I have 2 virtual networks in 2 different subscriptions as below:
VNET1 : 192.168.0.0/24 in subscription#1 (HUB)
VNET2 : 192.168.1.0/24 in subscription#2 (SPOKE)
I've created the peering and I am ...
- 762
0
votes
1
answer
885
views
Azure Point-to-Site VPN Client: How to configure the Azure Private DNS Resolver IP?
I connected to the Azure Network using the Azure Point-to-Site VPN Client. Additionally, I configured the Azure Private DNS Resolver, and I was able to resolve the Private Endpoint by specifying the ...
- 762
1
vote
1
answer
1k
views
Azure: Is it necessary to have dedicated Private DNS for each resource type like file, blob, table, Cosmos, and SQL?
My application on Azure consists of a Storage Account, Cosmos DB, SQL Server, a Web App, and a Function App. The Private Endpoint needs to be set up and used. Every type of Private Endpoint requires a ...
- 762
1
vote
1
answer
556
views
Azure Firewall: How to translate Internet URL to Internal/Intranet URL?
I have created the following Vnets
vnet-hub-poc-hubspoke is the Hub Vnet
and both the Vnets are peered as per the HUB-SPOKE model
vnet-hub-poc-hubspoke being a Hub Vnet, it has Azure firewall ...
- 762
0
votes
2
answers
3k
views
Resolving DNS names for Azure private endpoint of another company, when using private endpoint ourselves
It was hard to find an explicit title for that issue...
We got a DNS server hosted in Azure which serves as a relay/conditional forwarder for the private DNS zones we have in our Azure tenant. ...
- 31
0
votes
1
answer
474
views
Need help on proper set up of On-premises workloads using a DNS forwarder in Azure
I would appreciate any help with the proper set up of On-premises workloads using a DNS forwarder in Azure. I've followed the link below and have it works for my on-prem network to connect to the ...
- 322
1
vote
1
answer
2k
views
Azure Postgres Flexible Server - Vnet integration DNS not resolving
I provisioned the resources accordingly to the documentation.
https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-networking
I did the provisioning using BICEP.
The name of the ...
- 311
1
vote
0
answers
2k
views
azure web app + sql database private endpoint
I am trying to have a better understand how a web app and a sql can play together inside a vnet and different subnets, but Microsoft documentation is confusing me quiet a lot.
To start working on this,...
- 1,609
0
votes
1
answer
3k
views
Azure Data Factory Private Endpoint Use Case
I have all resources like SQL,ADLSv2,KeyVault, etc. with 'Selected Networks' access and private endpoints. My Azure Data Factory has no private endpoint, but its self-hosted integration runtime (SHIR) ...
-2
votes
1
answer
2k
views
How to make sure a Private DNS zone is resolving a given private ip?
The use case scenario here is that the private DNS resolves an internal IP acting as the default gateway of an API Manager - APIM.
In front of APIM, there is an Application Gateway with a backend pool ...
- 727
0
votes
2
answers
9k
views
terraform private endpoint private dns zone not able to populate
i have following code to create private endpoint, and if provided, will be associated with a private dns zone as well, however, the private endpoint is crated ignoring private dns zone value I entered,...
- 303
5
votes
1
answer
9k
views
Can we assign a virtual network with multiple private dns zone namespaces as virtual link?
Can we assign a virtual network with multiple private DNS zone namespaces as virtual links?
I have a virtual network privateEndpoint-VNet that needs to be added as a virtual link with multiple private ...
- 2,043
1
vote
0
answers
467
views
How to assign a custom azure private dns zone to an azure managed service like Redis or a storage account?
How to assign a custom azure private DNS zone to azure managed services like Redis or a storage account?
I have created a custom private DNS zone
'privatelink.blob.core.dev.windows.net'
But while ...
- 2,043
2
votes
1
answer
2k
views
Azure Private DNS with VNET Link not resolving
I am setting up a private dns zone in azure because we are moving our API management instance behind an application gateway. i enabled the vnet link between the zone and the significant Vnet, but it ...
0
votes
1
answer
2k
views
Azure Postgres Private endpoint not working with dns name
I have disabled the public connection for my azure postgresql database and created the private endpoint connection, I pointed my relevant vnet and subnet while private endpoint creation. Private ...
- 802
0
votes
1
answer
620
views
Connection Authentication to Azure CosmosDB through Private Link
I created a Private Link connection between an Azure VM and a CosmosDB MongoDB Account.
In order to clear out the need for token authentication and taking into account the best practices, I assigned a ...
- 187
0
votes
1
answer
1k
views
Creating an Azure Private DNS Zone A Recorset using CLI Commands: Parent Resource Not Found
I've deployed a blank Private DNS Zone ARM Template with the standards SOA recordset. I now need to add additional recordsets to this private dns zone using the Azure CLI commands.
The issue is the ...
- 153
0
votes
1
answer
951
views
Snowflake configuration with Azure Privatelink
We configured Azure Private Link connectivity to Snowflake account. Direct private link URL <accountname>.<region>.privatelink.snowflakecomputing.com works as expected.
However our goal to ...
- 2,789
0
votes
1
answer
422
views
Azure Private DNS Zone Query - PowerShell
The command to create Azure Private Dns zone iss as below :
'''$dnszone = New-AzPrivateDnsZone -ResourceGroupName “Test” -Name “privatelink.database.windows.net”'''
the name parameter value "...
5
votes
2
answers
6k
views
Access azure storage account from pipeline agent in same region with access restrictions enabled
We are using an azure storage account for our cloud services. This storage account is part of a virtual network, so access to the storage account is restricted to selected networks and the vnet is ...
- 1,912
0
votes
1
answer
62
views
internal DNS setup at our different offices but i was contemplating if it makes sense to use a Azure private DNS server
we have some internal DNS setup at our different offices but i was contemplating if it makes sense to use a Azure private DNS server.In confusion whether its a sensible thing to do or it is not a best ...
- 13
4
votes
2
answers
8k
views
Unable to connect to Azure Function App after integrating into VNET
Problem Outline
Azure Function App can not be accessed once it is integrated into a VNET and WEBSITE_VNET_ROUTE_ALL is set to 1.
This is required so that the Function App can securely connect to SQL ...
0
votes
1
answer
287
views
We are trying to make Snowflake work AD SSO Logon using Azure AD SSO. How does Active Directory SSO work?
They are trying to migrate Oracle database into snowflake. THey are going to convert all existing oracle accounts to snowflake accounts. Now, if AD LDAP logon is enabled, does new users have to only ...
- 1
2
votes
1
answer
5k
views
Azure How can I call Azure Private Endpoint (Azure Private Link service) by private IP inside of VNET
I created VNET in Azure. I put in one subset Azure Private Link which calls Azure Function outside of the VNET and in another one Virtual machine. When I tried to call private endpoint by private IP ...
- 103
0
votes
1
answer
1k
views
Azure SQL Private Link & Failover Group
According to the MS Docs around private link and azure SQL failover groups, after creating private links to the primary and failover SQL server instances, subsequently creating the failover group ...
- 759
0
votes
1
answer
100
views
Deploying Azure application internally
Can anyone suggest some solution for this scenario?:
I have two resources deployed in a VNet: Application Gateway and a VM behind application gateway. (Application gateways in subnet1 and VM in ...
- 27
0
votes
1
answer
2k
views
Azure link VNET to Private DNS with Azure CLI
I'm working on an Azure CLI script to automate the creation of a vnet in our cloud infrastructure. One of the parts in this script is linking a VNET to a Azure Private DNS. This should be easy, but ...
- 6,909