You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/logic-apps/secure-single-tenant-workflow-virtual-network-private-endpoint.md
+12-12Lines changed: 12 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,26 +5,26 @@ services: logic-apps
5
5
ms.suite: integration
6
6
ms.reviewer: estfan, azla
7
7
ms.topic: how-to
8
-
ms.date: 03/11/2022
8
+
ms.date: 08/08/2022
9
9
10
-
# As a developer, I want to connect to my single-tenant logic app workflows with virtual networks using private endpoints and VNet integration.
10
+
# As a developer, I want to connect to my single-tenant logic app workflows with virtual networks using private endpoints and virtual network integration.
11
11
---
12
12
13
-
# Secure traffic between single-tenant Standard logic apps and Azure virtual networks using private endpoints and VNet integration
13
+
# Secure traffic between single-tenant Standard logic apps and Azure virtual networks using private endpoints
To securely and privately communicate between your workflow in a Standard logic app and an Azure virtual network, you can set up *private endpoints* for inbound traffic and use VNet integration for outbound traffic.
17
+
To securely and privately communicate between your workflow in a Standard logic app and an Azure virtual network, you can set up *private endpoints* for inbound traffic and use virtual network integration for outbound traffic.
18
18
19
19
A private endpoint is a network interface that privately and securely connects to a service powered by Azure Private Link. This service can be an Azure service such as Azure Logic Apps, Azure Storage, Azure Cosmos DB, SQL, or your own Private Link Service. The private endpoint uses a private IP address from your virtual network, which effectively brings the service into your virtual network.
20
20
21
-
This article shows how to set up access through private endpoints for inbound traffic and VNet integration for outbound traffic.
21
+
This article shows how to set up access through private endpoints for inbound traffic and virtual network integration for outbound traffic.
22
22
23
23
For more information, review the following documentation:
24
24
25
25
-[What is Azure Private Endpoint?](../private-link/private-endpoint-overview.md) and [Private endpoints - Integrate your app with an Azure virtual network](../app-service/overview-vnet-integration.md#private-endpoints)
26
26
-[What is Azure Private Link?](../private-link/private-link-overview.md)
27
-
-[What is Vnet integration?](../app-service/networking-features.md#regional-vnet-integration)
@@ -115,9 +115,9 @@ For more information, review [Create single-tenant logic app workflows in Azure
115
115
116
116
<aname="set-up-outbound"></a>
117
117
118
-
## Set up outbound traffic using VNet integration
118
+
## Set up outbound traffic using virtual network integration
119
119
120
-
To secure outbound traffic from your logic app, you can integrate your logic app with a virtual network. First, create and test an example workflow. You can then set up VNet integration.
120
+
To secure outbound traffic from your logic app, you can integrate your logic app with a virtual network. First, create and test an example workflow. You can then set up virtual network integration.
121
121
122
122
> [!IMPORTANT]
123
123
> You can't change the subnet size after assignment, so use a subnet that's large enough to accommodate
@@ -139,7 +139,7 @@ To secure outbound traffic from your logic app, you can integrate your logic app
139
139
140
140
The HTTP action fails, which is by design and expected because the workflow runs in the cloud and can't access your internal service.
141
141
142
-
### Set up VNet integration
142
+
### Set up virtual network integration
143
143
144
144
1. In the Azure portal, on the logic app resource menu, under **Settings**, select **Networking**.
145
145
@@ -151,7 +151,7 @@ To secure outbound traffic from your logic app, you can integrate your logic app
151
151
152
152
1. If you use your own domain name server (DNS) with your virtual network, set your logic app resource's `WEBSITE_DNS_SERVER` app setting to the IP address for your DNS. If you have a secondary DNS, add another app setting named `WEBSITE_DNS_ALT_SERVER`, and set the value also to the IP for your DNS.
153
153
154
-
1. After Azure successfully provisions the VNet integration, try to run the workflow again.
154
+
1. After Azure successfully provisions the virtual network integration, try to run the workflow again.
155
155
156
156
The HTTP action now runs successfully.
157
157
@@ -167,9 +167,9 @@ To secure outbound traffic from your logic app, you can integrate your logic app
167
167
>
168
168
>
169
169
> For Azure-hosted managed connectors to work, you need to have an uninterrupted connection to the managed API service.
170
-
> With VNet integration, you need to make sure no firewall or network security policy is blocking these connections.
170
+
> With virtual network integration, make sure that no firewall or network security policy blocks these connections.
171
171
172
-
### Considerations for outbound traffic through VNet integration
172
+
### Considerations for outbound traffic through virtual network integration
173
173
174
174
If your virtual network uses a network security group (NSG), user-defined route table (UDR), or a firewall, make sure that the virtual network allows outbound connections to [all managed connector IP addresses](/connectors/common/outbound-ip-addresses#azure-logic-apps) in the corresponding region. Otherwise, Azure-managed connectors won't work.
0 commit comments