What's changed: Deepened AZ-700 Chapter 5 (ja figures; comparison tables/scenarios/FAQ/traps/deep paragraphs in all sections)
5.1Private Link and Private Endpoints
Understand Azure Private Link and private endpoints that bring PaaS (Storage, SQL, etc.) connectivity onto a private IP inside the VNet, plus the private DNS zone that backs name resolution. The goal is to reach PaaS without using the public path.
PaaS has a public endpoint by default. With Private Link, you bring PaaS connectivity onto a private IP (private endpoint) inside the VNet, bypassing the internet.
5.1.1How Private Link works
- Private endpoint: a NIC with a private IP in the VNet through which you reach the PaaS via that IP.
- Private Link: the platform that connects to PaaS via the private endpoint without the public path.
- Private DNS zone: resolves the PaaS FQDN to the private IP (nearly essential to integrate).
- Disable public access: disable the PaaS public endpoint to allow private-only access.
Common on AZ-700: bring PaaS onto a private IP = private endpoint (Private Link), FQDN → private IP resolution = private DNS zone, fully cut the public path = disable PaaS public access. Resolving from on-prem needs a DNS Private Resolver / conditional forwarders.
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.