A design decision is between service endpoints and Private Link for a storage account that must minimize data exfiltration risk and avoid public endpoint exposure. Which option is the safer answer?

Question

Accepted Answer

B. Private Link, because it provides a private endpoint to the resource over the Azure backbone. Private Link provides a private endpoint to the specific PaaS resource and is the safer answer when requirements explicitly call for private endpoint-style access and stronger exfiltration controls. Option a is wrong because service endpoints extend VNet identity to a public endpoint and do not create a private endpoint for the service.

A design decision is between service endpoints and Private Link for a storage account that must minimize data exfiltration risk and avoid public endpoint exposure. Which option is the safer answer?

Related Questions

Discussion