MENU
You have an Azure subscription that contains the resources shown in the following table.
App1 uses Function 1. SQL1, and storage1.
You need to secure the traffic between Appl. Function 1. SQL1, and storage1. by using private endpoints. With which resources can App1 communicate by using a private endpoint?
App1 can use private connectivity to SQL1 and storage1, but not to Function1 in the specified hosting plan.
Azure SQL Managed Instance supports Azure Private Link and private endpoints. Microsoft documents that a private endpoint exposes the managed instance through a private IP address in a selected virtual network, providing isolated connectivity to SQL Managed Instance without requiring its public endpoint. Microsoft Learn Azure Storage also supports private endpoints for its individual storage services, enabling applications with appropriate VNet connectivity and DNS resolution to reach storage over private IP addresses.
The differentiating resource is Function1. It runs on the legacy Azure Functions Consumption plan. Microsoft explicitly states that private endpoints for a Function App are supported on Flex Consumption, Elastic Premium, and Dedicated/App Service plans, but not on the Consumption plan. Microsoft Learn
App1 itself is hosted on a Premium App Service plan, which supports outbound virtual network integration. With that integration configured, App1 can route outbound connections through a virtual network to services exposed through private endpoints.
Currently there are no comments in this discussion, be the first to comment!