Skip to content

Commit 51e93e3

Browse files
committed
Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into pe-ddos-posh
2 parents 240f1b9 + c7d1fdc commit 51e93e3

File tree

1 file changed

+14
-1
lines changed

1 file changed

+14
-1
lines changed

articles/private-link/create-private-endpoint-cli.md

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,16 @@ az group create \
4848
--location eastus
4949
```
5050

51+
## Create a DDoS protection plan
52+
53+
Create a DDoS Protection plan with [az network ddos-protection create](/cli/azure/network/ddos-protection#az-network-ddos-protection-create) to associate with the virtual network. This example creates a DDoS Protection plan named **myDDoSPlan** in the **EastUS** location:
54+
55+
```azurecli-interactive
56+
az network ddos-protection create \
57+
--resource-group CreatePrivateEndpointQS-rg \
58+
--name myDDoSPlan
59+
```
60+
5161
## Create a virtual network and bastion host
5262

5363
A virtual network and subnet is required for to host the private IP address for the private endpoint. You'll create a bastion host to connect securely to the virtual machine to test the private endpoint. You'll create the virtual machine in a later section.
@@ -61,7 +71,9 @@ az network vnet create \
6171
--name myVNet \
6272
--address-prefixes 10.0.0.0/16 \
6373
--subnet-name myBackendSubnet \
64-
--subnet-prefixes 10.0.0.0/24
74+
--subnet-prefixes 10.0.0.0/24 \
75+
--ddos-protection-plan myDDoSPlan \
76+
--ddos-protection true
6577
```
6678

6779
Create a bastion subnet with **[az network vnet subnet create](/cli/azure/network/vnet/subnet#az-network-vnet-subnet-create)**.
@@ -102,6 +114,7 @@ It can take a few minutes for the Azure Bastion host to deploy.
102114
An Azure service that supports private endpoints is required to set up the private endpoint and connection to the virtual network. For the examples in this article, you'll use the Azure WebApp from the prerequisites. For more information on the Azure services that support a private endpoint, see [Azure Private Link availability](availability.md).
103115

104116
A private endpoint can have a static or dynamically assigned IP address.
117+
105118
> [!IMPORTANT]
106119
> You must have a previously deployed Azure WebApp to proceed with the steps in this article. For more information, see [Prerequisites](#prerequisites) .
107120

0 commit comments

Comments
 (0)