Skip to content

Commit 1bebc66

Browse files
author
Larry Franks
committed
incorporating feedback
1 parent f78d435 commit 1bebc66

File tree

2 files changed

+17
-2
lines changed

2 files changed

+17
-2
lines changed

articles/machine-learning/how-to-secure-training-vnet.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,14 +25,14 @@ ms.devlang: azurecli
2525
Azure Machine Learning compute instance and compute cluster can be used to securely train models in a virtual network. When planning your environment, you can configure the compute instance/cluster with or without a public IP address. The general differences between the two are:
2626

2727
* **No public IP**: Reduces costs as it doesn't have the same networking resource requirements. Improves security by removing the requirement for inbound traffic from the internet. However, there are additional configuration changes required to enable outbound access to required resources (Azure Active Directory, Azure Resource Manager, etc.).
28-
* **Public IP**: Works by default, but costs more due to additional Azure networking resources. Requires inbound communication from the public internet.
28+
* **Public IP**: Works by default, but costs more due to additional Azure networking resources. Requires inbound communication from the Azure Machine Learning service over the public internet.
2929

3030
The following table contains the differences between these configurations:
3131

3232
| Configuration | With public IP | Without public IP |
3333
| ----- | ----- | ----- |
3434
| Inbound traffic | AzureMachineLearning | None |
35-
| Outbound traffic | By default, can access the public internet with no restrictions.<br>You can restrict what it accesses. | By default, it cannot access the public internet since there is no public IP resource.<br>You need a Virtual Network NAT gateway or Firewall to route outbound traffic to required resources on the internet. |
35+
| Outbound traffic | By default, can access the public internet with no restrictions.<br>You can restrict what it accesses using a Network Security Group or firewall. | By default, it cannot access the public internet since there is no public IP resource.<br>You need a Virtual Network NAT gateway or Firewall to route outbound traffic to required resources on the internet. |
3636
| Azure networking resources | Public IP address, load balancer, network interface | None |
3737

3838
You can also use Azure Databricks or HDInsight to train models in a virtual network.

articles/machine-learning/v1/how-to-secure-training-vnet.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,21 @@ ms.custom: contperf-fy20q4, tracking-python, contperf-fy21q1, references_regions
2323
2424
In this article, you learn how to secure training environments with a virtual network in Azure Machine Learning using the Python SDK v1.
2525

26+
Azure Machine Learning compute instance and compute cluster can be used to securely train models in a virtual network. When planning your environment, you can configure the compute instance/cluster with or without a public IP address. The general differences between the two are:
27+
28+
* **No public IP**: Reduces costs as it doesn't have the same networking resource requirements. Improves security by removing the requirement for inbound traffic from the internet. However, there are additional configuration changes required to enable outbound access to required resources (Azure Active Directory, Azure Resource Manager, etc.).
29+
* **Public IP**: Works by default, but costs more due to additional Azure networking resources. Requires inbound communication from the Azure Machine Learning service over the public internet.
30+
31+
The following table contains the differences between these configurations:
32+
33+
| Configuration | With public IP | Without public IP |
34+
| ----- | ----- | ----- |
35+
| Inbound traffic | AzureMachineLearning | None |
36+
| Outbound traffic | By default, can access the public internet with no restrictions.<br>You can restrict what it accesses using a Network Security Group or firewall. | By default, it cannot access the public internet since there is no public IP resource.<br>You need a Virtual Network NAT gateway or Firewall to route outbound traffic to required resources on the internet. |
37+
| Azure networking resources | Public IP address, load balancer, network interface | None |
38+
39+
You can also use Azure Databricks or HDInsight to train models in a virtual network.
40+
2641
> [!TIP]
2742
> For information on using the Azure Machine Learning __studio__ and the Python SDK __v2__, see [Secure training environment (v2)](../how-to-secure-training-vnet.md).
2843
>

0 commit comments

Comments
 (0)