You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-monitor/logs/private-link-configure.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ ms.date: 1/5/2022
10
10
# Configure your private link
11
11
Configuring an instance of Azure Private Link requires you to:
12
12
13
-
* Create an Azure Monitor private link scope (AMPLS) with resources.
13
+
* Create an Azure Monitor Private Link Scope (AMPLS) with resources.
14
14
* Create a private endpoint on your network and connect it to the scope.
15
15
* Configure the required access on your Azure Monitor resources.
16
16
@@ -19,7 +19,7 @@ This article reviews how configuration is done through the Azure portal. It prov
19
19
## Create a private link connection through the Azure portal
20
20
In this section, we review the step-by-step process of setting up a private link through the Azure portal. To create and manage a private link by using the command line or an ARM template, see [Use APIs and command line](#use-apis-and-command-line).
21
21
22
-
### Create an Azure Monitor private link scope
22
+
### Create an Azure Monitor Private Link Scope
23
23
24
24
1. Go to **Create a resource** in the Azure portal and search for **Azure Monitor Private Link Scope**.
25
25
@@ -30,7 +30,7 @@ In this section, we review the step-by-step process of setting up a private link
30
30
1. Give the AMPLS a name. Use a meaningful and clear name like *AppServerProdTelem*.
31
31
1. Select **Review + create**.
32
32
33
-

33
+

Now that you have resources connected to your AMPLS, create a private endpoint to connect your network. You can do this task in the [Azure portal Private Link Center](https://portal.azure.com/#blade/Microsoft_Azure_Network/PrivateLinkCenterBlade/privateendpoints) or inside your AMPLS, as done in this example.
52
52
53
-
1. In your scope resource, select **Private Endpoint connections**in the resource menu on the left. Select **Private Endpoint** to start the endpoint creation process. You can also approve connections that were started in the Private Link Center here by selecting them and selecting **Approve**.
53
+
1. In your scope resource, select **Private Endpoint connections**from the resource menu on the left. Select **Private Endpoint** to start the endpoint creation process. You can also approve connections that were started in the Private Link Center here by selecting them and selecting **Approve**.
54
54
55
55
:::image type="content" source="./media/private-link-security/ampls-select-private-endpoint-connect-3.png" alt-text="Screenshot that shows Private Endpoint connections." lightbox="./media/private-link-security/ampls-select-private-endpoint-connect-3.png":::
56
56
@@ -59,9 +59,9 @@ Now that you have resources connected to your AMPLS, create a private endpoint t
59
59
1. Select **Next: Resource**.
60
60
61
61
1. On the **Resource** tab:
62
-
1. Select the subscription that contains your Azure Monitor private link scope resource.
62
+
1. Select the subscription that contains your Azure Monitor Private Link Scope resource.
63
63
1. For **Resource type**, select **Microsoft.insights/privateLinkScopes**.
64
-
1. From the **Resource** dropdown, select the private link scope you created earlier.
64
+
1. From the **Resource** dropdown, select the Private Link Scope you created earlier.
65
65
1. Select **Next: Virtual Network**.
66
66
67
67
:::image type="content" source="./media/private-link-security/ampls-select-private-endpoint-create-4.png" alt-text="Screenshot that shows the Create a private endpoint page in the Azure portal with the Resource tab selected." lightbox="./media/private-link-security/ampls-select-private-endpoint-create-4.png":::
@@ -94,12 +94,12 @@ Go to the Azure portal. On your resource's menu, find **Network Isolation** on t
94
94
95
95

96
96
97
-
### Connected Azure Monitor private link scopes
98
-
Here you can review and configure the resource's connections to AMPLSs. Connecting to AMPLSs allows traffic from the virtual network connected to each AMPLS to reach the resource. It has the same effect as connecting it from the scope as we did in the section [Connect Azure Monitor resources](#connect-azure-monitor-resources).
97
+
### Connected Azure Monitor Private Link Scopes
98
+
Here you can review and configure the resource's connections to an AMPLS. Connecting to an AMPLS allows traffic from the virtual network connected to each AMPLS to reach the resource. It has the same effect as connecting it from the scope as we did in the section [Connect Azure Monitor resources](#connect-azure-monitor-resources).
99
99
100
100
To add a new connection, select **Add** and select the AMPLS. Select **Apply** to connect it. Your resource can connect to five AMPLS objects, as mentioned in [Consider AMPLS limits](./private-link-design.md#consider-ampls-limits).
101
101
102
-
### Virtual networks access configuration: Manage access from outside of private link scopes
102
+
### Virtual networks access configuration: Manage access from outside of a Private Link Scope
103
103
The settings on the bottom part of this page control access from public networks, meaning networks not connected to the listed scopes.
104
104
105
105
If you set **Accept data ingestion from public networks not connected through a Private Link Scope** to **No**, clients like machines or SDKs outside of the connected scopes can't upload data or send logs to the resource.
@@ -112,8 +112,8 @@ That data includes access to logs, metrics, and the live metrics stream. It also
112
112
113
113
You can automate the process described earlier by using ARM templates, REST, and command-line interfaces.
114
114
115
-
### Create and manage private link scopes
116
-
To create and manage private link scopes, use the [REST API](/rest/api/monitor/privatelinkscopes(preview)/private%20link%20scoped%20resources%20(preview)) or the [Azure CLI (az monitor private-link-scope)](/cli/azure/monitor/private-link-scope).
115
+
### Create and manage Private Link Scopes
116
+
To create and manage Private Link Scopes, use the [REST API](/rest/api/monitor/privatelinkscopes(preview)/private%20link%20scoped%20resources%20(preview)) or the [Azure CLI (az monitor private-link-scope)](/cli/azure/monitor/private-link-scope).
117
117
118
118
#### Create an AMPLS with Open access modes: CLI example
119
119
The following CLI command creates a new AMPLS resource named `"my-scope"`, with both query and ingestion access modes set to `Open`.
Copy file name to clipboardExpand all lines: articles/azure-monitor/logs/private-link-design.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,9 +7,9 @@ ms.topic: conceptual
7
7
ms.date: 12/14/2022
8
8
---
9
9
10
-
# Design your Private Link setup
10
+
# Design your Azure Private Link setup
11
11
12
-
Before you set up your Azure Private Link instance, consider your network topology and your DNS routing topology.
12
+
Before you set up your instance of Azure Private Link, consider your network topology and your DNS routing topology.
13
13
14
14
As discussed in [Use Azure Private Link to connect networks to Azure Monitor](private-link-security.md), setting up a private link affects traffic to all Azure Monitor resources. That's especially true for Application Insights resources. It also affects not only the network connected to the private endpoint but also all other networks that share the same DNS.
Copy file name to clipboardExpand all lines: articles/azure-monitor/logs/private-link-security.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -53,9 +53,9 @@ When you configure Private Link even for a single resource, traffic to the follo
53
53
***The query endpoint**: The endpoint handling queries to both Application Insights and Log Analytics resources is global.
54
54
55
55
> [!IMPORTANT]
56
-
> Creating a private link affects traffic to *all* monitoring resources, not only resources in your AMPLS. Effectively, it will cause all query requests and ingestion to Application Insights components to go through private IPs. It doesn't mean the Private Link validation applies to all these requests.</br>
56
+
> Creating a private link affects traffic to *all* monitoring resources, not only resources in your AMPLS. Effectively, it will cause all query requests and ingestion to Application Insights components to go through private IPs. It doesn't mean the private link validation applies to all these requests.</br>
57
57
>
58
-
>Resources not added to the AMPLS can only be reached if the AMPLS access mode is Open and the target resource accepts traffic from public networks. When you use the private IP, *Private Link validations don't apply to resources not in the AMPLS*. To learn more, see [Private Link access modes](#private-link-access-modes-private-only-vs-open).
58
+
>Resources not added to the AMPLS can only be reached if the AMPLS access mode is Open and the target resource accepts traffic from public networks. When you use the private IP, *private link validations don't apply to resources not in the AMPLS*. To learn more, see [Private Link access modes](#private-link-access-modes-private-only-vs-open).
59
59
60
60
### Resource-specific endpoints
61
61
Log Analytics endpoints are workspace specific, except for the query endpoint discussed earlier. As a result, adding a specific Log Analytics workspace to the AMPLS will send ingestion requests to this workspace over the private link. Ingestion to other workspaces will continue to use the public endpoints.
@@ -87,7 +87,7 @@ Although Log Analytics query requests are affected by the AMPLS access mode sett
87
87
>
88
88
89
89
## Next steps
90
-
-[Design your Private Link setup](private-link-design.md).
90
+
-[Design your Azure Private Link setup](private-link-design.md).
91
91
- Learn how to [configure your private link](private-link-configure.md).
92
92
- Learn about [private storage](private-storage.md) for custom logs and customer-managed keys.
0 commit comments