Private endpoints and private data paths
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
keep data traffic off the public internet.
Planned topics
- A private endpoint gives a cloud service (storage, database) a private address inside your network.
- Combine with disabling public access on the service itself.
- DNS must resolve the service name to the private address; misconfigured DNS is the usual failure.
- Private paths reduce exposure and often reduce NAT and data transfer cost.
- Policy: data stores must have no public endpoint by default.
Draft outline details
Demonstration
diagram: application subnet to a private endpoint to the managed database, with the database's public access switched off.
Check your understanding
What commonly breaks after creating a private endpoint?
Show answer
DNS resolution to the private address.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.