You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/machine-learning/tutorial-create-secure-workspace.md
+26-34Lines changed: 26 additions & 34 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -70,9 +70,18 @@ To create a virtual network, use the following steps:
70
70
71
71
:::image type="content" source="./media/tutorial-create-secure-workspace/create-vnet-basics.png" alt-text="Image of the basic virtual network config":::
72
72
73
-
1. Select __IP Addresses__ tab. The default settings should be similar to the following image:
73
+
1. Select __Security__. Select to __Enable Azure Bastion__. [Azure Bastion](../bastion/bastion-overview.md) provides a secure way to access the VM jump box you'll create inside the VNet in a later step. Use the following values for the remaining fields:
74
74
75
-
:::image type="content" source="./media/tutorial-create-secure-workspace/create-vnet-ip-address-default.png" alt-text="Default IP Address screen":::
75
+
*__Bastion name__: A unique name for this Bastion instance
76
+
*__Public IP address__: Create a new public IP address.
77
+
78
+
Leave the other fields at the default values.
79
+
80
+
:::image type="content" source="./media/tutorial-create-secure-workspace/create-bastion.png" alt-text="Screenshot of Bastion config.":::
81
+
82
+
1. Select __IP Addresses__. The default settings should be similar to the following image:
83
+
84
+
:::image type="content" source="./media/tutorial-create-secure-workspace/create-vnet-ip-address-default.png" alt-text="Default IP Address screen.":::
76
85
77
86
Use the following steps to configure the IP address and configure a subnet for training and scoring resources:
78
87
@@ -88,45 +97,28 @@ To create a virtual network, use the following steps:
88
97
89
98
1. Select the __Default__ subnet and then select __Remove subnet__.
90
99
91
-
:::image type="content" source="./media/tutorial-create-secure-workspace/delete-default-subnet.png" alt-text="Screenshot of deleting default subnet":::
100
+
:::image type="content" source="./media/tutorial-create-secure-workspace/delete-default-subnet.png" alt-text="Screenshot of deleting default subnet.":::
92
101
93
-
1. To create a subnet to contain the workspace, dependency services, and resources used for training, select __+ Add subnet__ and set the subnet name and address range. The following are the values used in this tutorial:
94
-
*__Subnet name__: Training
95
-
*__Subnet address range__: 172.16.0.0/24
102
+
1. To create a subnet to contain the workspace, dependency services, and resources used for _training_, select __+ Add subnet__ and set the subnet name, starting address, and subnet size. The following are the values used in this tutorial:
103
+
*__Name__: Training
104
+
*__Starting address__: 172.16.0.0
105
+
*__Subnet size__: /24 (256 addresses)
96
106
97
-
:::image type="content" source="./media/tutorial-create-secure-workspace/vnet-add-training-subnet.png" alt-text="Screenshot of Training subnet":::
107
+
:::image type="content" source="./media/tutorial-create-secure-workspace/vnet-add-training-subnet.png" alt-text="Screenshot of Training subnet.":::
98
108
99
-
> [!TIP]
100
-
> If you plan on using a _service endpoint_ to add your Azure Storage Account, Azure Key Vault, and Azure Container Registry to the VNet, select the following under __Services__:
101
-
> *__Microsoft.Storage__
102
-
> *__Microsoft.KeyVault__
103
-
> *__Microsoft.ContainerRegistry__
104
-
>
105
-
> If you plan on using a _private endpoint_ to add these services to the VNet, you do not need to select these entries. The steps in this article use a private endpoint for these services, so you do not need to select them when following these steps.
106
-
107
-
1. To create a subnet for compute resources used to score your models, select __+ Add subnet__ again, and set the name and address range:
109
+
1. To create a subnet for compute resources used to _score_ your models, select __+ Add subnet__ again, and set the name and address range:
108
110
*__Subnet name__: Scoring
109
-
*__Subnet address range__: 172.16.1.0/24
111
+
*__Starting address__: 172.16.1.0
112
+
*__Subnet size__: /24 (256 addresses)
110
113
111
-
:::image type="content" source="./media/tutorial-create-secure-workspace/vnet-add-scoring-subnet.png" alt-text="Screenshot of Scoring subnet":::
114
+
:::image type="content" source="./media/tutorial-create-secure-workspace/vnet-add-scoring-subnet.png" alt-text="Screenshot of Scoring subnet.":::
112
115
113
-
> [!TIP]
114
-
> If you plan on using a _service endpoint_ to add your Azure Storage Account, Azure Key Vault, and Azure Container Registry to the VNet, select the following under __Services__:
115
-
> *__Microsoft.Storage__
116
-
> *__Microsoft.KeyVault__
117
-
> *__Microsoft.ContainerRegistry__
118
-
>
119
-
> If you plan on using a _private endpoint_ to add these services to the VNet, you do not need to select these entries. The steps in this article use a private endpoint for these services, so you do not need to select them when following these steps.
120
-
121
-
1. Select __Security__. For __BastionHost__, select __Enable__. [Azure Bastion](../bastion/bastion-overview.md) provides a secure way to access the VM jump box you'll create inside the VNet in a later step. Use the following values for the remaining fields:
122
-
123
-
*__Bastion name__: A unique name for this Bastion instance
0 commit comments