Private endpoint using service alias

[jyrijh]

I need to create a VNet peering between 2 regions to use elastic cloud and this we have tested manually.
Now I am trying to create bicep deployment for this and it needs to use service alias that is provided by elastic.

So the question is this even possible or do I just need to create manually after everything else i deployed?

resource elasticPrivateEndpoint 'Microsoft.Network/privateEndpoints@2024-05-01' = {
  name: 'elastic-cloud-private-endpoint'
  location: location
  tags: union(tags, { 'azd-service-name': 'elastic' })
  properties: {
    privateLinkServiceConnections: [
      {
        name: 'elasticPrivateLinkConnection'
        properties: {
          privateLinkServiceId: 'westeurope-prod-001-privatelink-service.190cd496-6d79-4ee2-8f23-0667fd5a8ec1.westeurope.azure.privatelinkservice'
          groupIds: [
            'elastic'
          ]
        }
      }
    ]
    subnet: {
      id: '${vnet.id}/subnets/${subnetName}'
    }
  }
}

Regard, Jyri

[jyrijh]

Elastic instructions for creating private endpoint
https://www.elastic.co/guide/en/cloud/current/ec-traffic-filtering-vnet.html#ec-private-link-azure-service-aliases
https://www.elastic.co/guide/en/cloud/current/ec-traffic-filtering-vnet.html#ec-private-link-azure-dns

[jyrijh]

It needs to be a manualPrivateLinkServiceConnections

resource elasticPrivateEndpoint 'Microsoft.Network/privateEndpoints@2024-05-01' = {
  name: 'elastic-cloud-private-endpoint'
  location: location
  tags: union(tags, { 'azd-service-name': 'elastic' })
  properties: {
    manualPrivateLinkServiceConnections: [
      {
    
        name: 'elasticPrivateLinkConnection'
        properties: {
          privateLinkServiceId: 'westeurope-prod-001-privatelink-service.190cd496-6d79-4ee2-8f23-0667fd5a8ec1.westeurope.azure.privatelinkservice'
          groupIds: []
        }
      }
    ]
    subnet: {
      id: '${vnet.id}/subnets/${subnetName}'
    }
  }
}