Skip to content

Private Endpoint

Create a Private Endpoint

A private endpoint is a network interface that connects you privately and securely to a service powered by Azure Private Link. Below is an example of how to create private endpoints and create a private connection to both an Automation Account and a Storage Account. The aa_Webhook private endpoint example also shows how to optionally associate a private endpoint with a private DNS zone using a private DNS zone group.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
storage_accounts = {
    "diagsaphdev" = {
        resource_group = "hsw"
        public_network_access_enabled = true
        shared_access_key_enabled = false
    }   
}

automation_account = {
    sapphireautomationdev = {
        resource_group = "hsw"
        sku = "Basic"
        identity = {
            type = "SystemAssigned"
        }
    }
}

private_dns_zones = {
    "sapphire.dev" = {
        resource_group = "hsw"
    }
}

private_endpoints = {
    // automation account private endpoints for the "Webhook" subresource
    aa_Webhook = {
        resource_group = "hsw"
        subnet = "hsw.hsw"
        private_service_connection = {
            private_connection_resource_type = "automation_account"
            private_connection_resource = "sapphireautomationdev"
            subresource_names = ["Webhook"]
        }
        private_dns_zone_group = { // optionaly associate with a private DNS zone
            private_dns_zones = ["sapphire.dev"]
        }
    }
    // automation account private endpoints for the "DSCAndHybridWorker" subresource
    aa_DSCAndHybridWorker = {
        resource_group = "hsw"
        subnet = "hsw.hsw"
        private_service_connection = {
            private_connection_resource_type = "automation_account"
            private_connection_resource = "sapphireautomationdev"
            subresource_names = ["DSCAndHybridWorker"]
        }
    }
    // storage account private endpoint
    sa_diagsaphdev = {
        resource_group = "hsw"
        subnet = "hsw.hsw"
        private_service_connection = {
            private_connection_resource_type = "storage_account"
            private_connection_resource = "diagsaphdev"
            subresource_names = ["file"]
        }
    }
}