A team wants to access a specific Azure PaaS resource from peered virtual networks and from on-premises over VPN or ExpressRoute private peering while reducing data leakage risk to other resources in the service. Which design is best?

Question

Accepted Answer

A. Use a private endpoint. A private endpoint maps to a specific resource instance and can be reached from peered VNets and on-premises over private connectivity, which helps reduce data leakage risk. Option b is wrong because service endpoints secure service access from subnets but don't create a private IP for a specific resource instance in your VNet.

A team wants to access a specific Azure PaaS resource from peered virtual networks and from on-premises over VPN or ExpressRoute private peering while reducing data leakage risk to other resources in the service. Which design is best?

Related Questions

Discussion