Skip to content

Commit 1104c81

Browse files
author
AbhishekMallick01
committed
addressed review comments from Dev
1 parent fc196d8 commit 1104c81

File tree

3 files changed

+5
-6
lines changed

3 files changed

+5
-6
lines changed

articles/backup/backup-azure-private-endpoints-concept.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Private endpoints for Azure Backup - Overview
33
description: This article explains about the concept of private endpoints for Azure Backup that helps to perform backups while maintaining the security of your resources.
44
ms.topic: conceptual
55
ms.service: backup
6-
ms.date: 04/06/2023
6+
ms.date: 04/26/2023
77
author: jyothisuri
88
ms.author: jsuri
99
---

articles/backup/backup-azure-private-endpoints-configure-manage.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: How to create and manage private endpoints (with v2 experience) for Azure
33
description: This article explains how to configure and manage private endpoints for Azure Backup.
44
ms.topic: how-to
55
ms.service: backup
6-
ms.date: 04/06/2023
6+
ms.date: 04/26/2023
77
author: jyothisuri
88
ms.author: jsuri
99
---

articles/backup/private-endpoints-overview.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Private endpoints overview
33
description: Understand the use of private endpoints for Azure Backup and the scenarios where using private endpoints helps maintain the security of your resources.
44
ms.topic: conceptual
5-
ms.date: 03/01/2023
5+
ms.date: 04/26/2023
66
ms.custom: devx-track-azurepowershell
77
ms.service: backup
88
author: jyothisuri
@@ -26,7 +26,6 @@ This article will help you understand how private endpoints for Azure Backup wor
2626
- A private endpoint connection for Backup uses a total of 11 private IPs in your subnet, including those used by Azure Backup for storage. This number may be higher for certain Azure regions. So we suggest that you have enough private IPs (/26) available when you attempt to create private endpoints for Backup.
2727
- While a Recovery Services vault is used by (both) Azure Backup and Azure Site Recovery, this article discusses use of private endpoints for Azure Backup only.
2828
- Private endpoints for Backup don’t include access to Azure Active Directory (Azure AD) and the same needs to be ensured separately. So, IPs and FQDNs required for Azure AD to work in a region will need outbound access to be allowed from the secured network when performing backup of databases in Azure VMs and backup using the MARS agent. You can also use NSG tags and Azure Firewall tags for allowing access to Azure AD, as applicable.
29-
- Virtual networks with Network Policies aren't supported for Private Endpoints. You'll need to [disable Network Polices](../private-link/disable-private-endpoint-network-policy.md) before continuing.
3029
- You need to re-register the Recovery Services resource provider with the subscription if you registered it before May 1 2020. To re-register the provider, go to your subscription in the Azure portal, navigate to **Resource provider** on the left navigation bar, then select **Microsoft.RecoveryServices** and select **Re-register**.
3130
- [Cross-region restore](backup-create-rs-vault.md#set-cross-region-restore) for SQL and SAP HANA database backups aren't supported if the vault has private endpoints enabled.
3231
- When you move a Recovery Services vault already using private endpoints to a new tenant, you'll need to update the Recovery Services vault to recreate and reconfigure the vault’s managed identity and create new private endpoints as needed (which should be in the new tenant). If this isn't done, the backup and restore operations will start failing. Also, any Azure role-based access control (Azure RBAC) permissions set up within the subscription will need to be reconfigured.
@@ -55,15 +54,15 @@ In addition to these connections when the workload extension or MARS agent is in
5554
| Service | Domain names |
5655
| --- | --- |
5756
| Azure Backup | `*.backup.windowsazure.com` |
58-
| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` |
57+
| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` <br><br> `*.storage.azure.net` |
5958
| Azure Active Directory (Azure AD) | [Allow access to FQDNs under sections 56 and 59](/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&preserve-view=true#microsoft-365-common-and-office-online). |
6059

6160
When the workload extension or MARS agent is installed for Recovery Services vault with private endpoint, the following endpoints are hit:
6261

6362
| Service | Domain name |
6463
| --- | --- |
6564
| Azure Backup | `*.privatelink.<geo>.backup.windowsazure.com` |
66-
| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` |
65+
| Azure Storage | `*.blob.core.windows.net` <br><br> `*.queue.core.windows.net` <br><br> `*.blob.storage.azure.net` <br><br> `*.storage.azure.net` |
6766
| Azure Active Directory (Azure AD) | [Allow access to FQDNs under sections 56 and 59](/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide&preserve-view=true#microsoft-365-common-and-office-online). |
6867

6968
>[!Note]

0 commit comments

Comments
 (0)