Skip to content

Commit f59eb55

Browse files
Merge pull request #4207 from Blackmist/convert-test
testing
2 parents 3ec9a3a + 787f67a commit f59eb55

File tree

2 files changed

+45
-40
lines changed

2 files changed

+45
-40
lines changed

articles/ai-foundry/how-to/configure-private-link.md

Lines changed: 36 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ ms.date: 01/15/2025
1010
ms.reviewer: meerakurup
1111
ms.author: larryfr
1212
author: Blackmist
13+
zone_pivot_groups: azure-portal-and-cli
1314
# Customer intent: As an admin, I want to configure a private link for hub so that I can secure my hubs.
1415
---
1516

@@ -25,7 +26,6 @@ You get several hub default resources in your resource group. You need to config
2526
- Establish private endpoint connection to hub default resources. You need to have both a blob and file private endpoint for the default storage account.
2627
- If your storage account is private, [assign roles](#private-storage-configuration) to allow access.
2728

28-
2929
## Prerequisites
3030

3131
* You must have an existing Azure Virtual Network to create the private endpoint in.
@@ -37,9 +37,9 @@ You get several hub default resources in your resource group. You need to config
3737

3838
## Create a hub that uses a private endpoint
3939

40-
If you are creating a new hub, use the following tabs to select how you are creating the hub (Azure portal or Azure CLI.) Each of these methods __requires an existing virtual network__:
40+
If you are creating a new hub, use the following methods to create the hub (Azure portal or Azure CLI). Each of these methods __requires an existing virtual network__:
4141

42-
# [Azure portal](#tab/azure-portal)
42+
:::zone pivot="azure-portal"
4343

4444
> [!NOTE]
4545
> The information in this document is only about configuring a private link. For a walkthrough of creating a secure hub in the portal, see [Create a secure hub in the Azure portal](create-secure-ai-hub.md).
@@ -55,7 +55,9 @@ If you are creating a new hub, use the following tabs to select how you are crea
5555

5656
1. Input required fields. When selecting the __Region__, select the same region as your virtual network.
5757

58-
# [Azure CLI](#tab/cli)
58+
:::zone-end
59+
60+
:::zone pivot="cli"
5961

6062
> [!NOTE]
6163
> The information in this section doesn't cover basic hub configuration. For more information, see [Create a hub using the Azure CLI](./develop/create-hub-project-sdk.md?tabs=azurecli).
@@ -95,34 +97,17 @@ az network private-endpoint dns-zone-group create \
9597
--name myzonegroup \
9698
--private-dns-zone privatelink.api.azureml.ms \
9799
--zone-name privatelink.api.azureml.ms
98-
99-
# Add privatelink.notebooks.azure.net
100-
az network private-dns zone create \
101-
-g <resource-group-name> \
102-
--name privatelink.notebooks.azure.net
103-
104-
az network private-dns link vnet create \
105-
-g <resource-group-name> \
106-
--zone-name privatelink.notebooks.azure.net \
107-
--name <link-name> \
108-
--virtual-network <vnet-name> \
109-
--registration-enabled false
110-
111-
az network private-endpoint dns-zone-group add \
112-
-g <resource-group-name> \
113-
--endpoint-name <private-endpoint-name> \
114-
--name myzonegroup \
115-
--private-dns-zone privatelink.notebooks.azure.net \
116-
--zone-name privatelink.notebooks.azure.net
117100
```
118101

102+
:::zone-end
103+
119104
---
120105

121106
## Add a private endpoint to a hub
122107

123108
Use one of the following methods to add a private endpoint to an existing hub:
124109

125-
# [Azure portal](#tab/azure-portal)
110+
:::zone pivot="azure-portal"
126111

127112
1. From the [Azure portal](https://portal.azure.com), select your hub.
128113
1. From the left side of the page, select __Settings__, __Networking__, and then select the __Private endpoint connections__ tab. Select __+ Private endpoint__.
@@ -131,13 +116,15 @@ Use one of the following methods to add a private endpoint to an existing hub:
131116

132117
1. When going through the forms to create a private endpoint, be sure to:
133118

134-
- From __Basics__, select the same the __Region__ as your virtual network.
119+
- From __Basics__, select the same __Region__ as your virtual network.
135120
- From __Resource__, select `amlworkspace` as the __target sub-resource__.
136121
- From the __Virtual Network__ form, select the virtual network and subnet that you want to connect to.
137122

138123
1. After populating the forms with any additional network configurations you require, use the __Review + create__ tab to review your settings and select __Create__ to create the private endpoint.
139124

140-
# [Azure CLI](#tab/cli)
125+
:::zone-end
126+
127+
:::zone pivot="cli"
141128

142129
Use the [Azure networking CLI commands](/cli/azure/network/private-endpoint#az-network-private-endpoint-create) to create a private link endpoint for the hub.
143130

@@ -159,11 +146,11 @@ To create the private DNS zone entries for the workspace, use the following comm
159146
# Add privatelink.api.azureml.ms
160147
az network private-dns zone create \
161148
-g <resource-group-name> \
162-
--name 'privatelink.api.azureml.ms'
149+
--name privatelink.api.azureml.ms
163150
164151
az network private-dns link vnet create \
165152
-g <resource-group-name> \
166-
--zone-name 'privatelink.api.azureml.ms' \
153+
--zone-name privatelink.api.azureml.ms \
167154
--name <link-name> \
168155
--virtual-network <vnet-name> \
169156
--registration-enabled false
@@ -172,17 +159,17 @@ az network private-endpoint dns-zone-group create \
172159
-g <resource-group-name> \
173160
--endpoint-name <private-endpoint-name> \
174161
--name myzonegroup \
175-
--private-dns-zone 'privatelink.api.azureml.ms' \
176-
--zone-name 'privatelink.api.azureml.ms'
162+
--private-dns-zone privatelink.api.azureml.ms \
163+
--zone-name privatelink.api.azureml.ms
177164
178165
# Add privatelink.notebooks.azure.net
179166
az network private-dns zone create \
180167
-g <resource-group-name> \
181-
--name 'privatelink.notebooks.azure.net'
168+
--name privatelink.notebooks.azure.net
182169
183170
az network private-dns link vnet create \
184171
-g <resource-group-name> \
185-
--zone-name 'privatelink.notebooks.azure.net' \
172+
--zone-name privatelink.notebooks.azure.net \
186173
--name <link-name> \
187174
--virtual-network <vnet-name> \
188175
--registration-enabled false
@@ -191,10 +178,12 @@ az network private-endpoint dns-zone-group add \
191178
-g <resource-group-name> \
192179
--endpoint-name <private-endpoint-name> \
193180
--name myzonegroup \
194-
--private-dns-zone 'privatelink.notebooks.azure.net' \
195-
--zone-name 'privatelink.notebooks.azure.net'
181+
--private-dns-zone privatelink.notebooks.azure.net \
182+
--zone-name privatelink.notebooks.azure.net
196183
```
197184

185+
:::zone-end
186+
198187
---
199188

200189
## Remove a private endpoint
@@ -206,24 +195,28 @@ You can remove one or all private endpoints for a hub. Removing a private endpoi
206195
207196
To remove a private endpoint, use the following information:
208197

209-
# [Azure portal](#tab/azure-portal)
198+
:::zone pivot="azure-portal"
210199

211200
1. From the [Azure portal](https://portal.azure.com), select your hub.
212201
1. From the left side of the page, select __Settings__, __Networking__, and then select the __Private endpoint connections__ tab.
213202
1. Select the endpoint to remove and then select __Remove__.
214203

215204
:::image type="content" source="../media/how-to/network/remove-private-endpoint.png" alt-text="Screenshot of a selected private endpoint with the remove option highlighted.":::
216205

217-
# [Azure CLI](#tab/cli)
206+
:::zone-end
207+
208+
:::zone pivot="cli"
218209

219210
When using the Azure CLI, use the following command to remove the private endpoint:
220211

221212
```azurecli
222213
az network private-endpoint delete \
223214
--name <private-endpoint-name> \
224-
--resource-group <resource-group-name> \
215+
--resource-group <resource-group-name>
225216
```
226217

218+
:::zone-end
219+
227220
---
228221

229222
## Enable public access
@@ -235,13 +228,15 @@ In some situations, you might want to allow someone to connect to your secured h
235228
236229
To enable public access, use the following steps:
237230

238-
# [Azure portal](#tab/azure-portal)
231+
:::zone pivot="azure-portal"
239232

240233
1. From the [Azure portal](https://portal.azure.com), select your hub.
241234
1. From the left side of the page, select __Networking__ and then select the __Public access__ tab.
242235
1. Select __Enabled from all networks__, and then select __Save__.
243236

244-
# [Azure CLI](#tab/cli)
237+
:::zone-end
238+
239+
:::zone pivot="cli"
245240

246241
Use the following Azure CLI command to enable public access:
247242

@@ -255,8 +250,9 @@ If you receive an error that the `ml` command isn't found, use the following com
255250
az extension add --name ml
256251
```
257252

258-
---
253+
:::zone-end
259254

255+
---
260256

261257
## Private storage configuration
262258

zone-pivots/zone-pivot-groups.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1151,3 +1151,12 @@ groups:
11511151
title: Python
11521152
- id: programming-language-typescript
11531153
title: TypeScript
1154+
- id: azure-portal-and-cli
1155+
# Owner: Larryfr
1156+
title: Portal and CLI
1157+
prompt: Choose a usage method
1158+
pivots:
1159+
- id: azure-portal
1160+
title: Azure portal
1161+
- id: cli
1162+
title: Azure CLI

0 commit comments

Comments
 (0)