|
| 1 | +--- |
| 2 | +title: Microsoft Energy Data Services - how to set up private links #Required; page title is displayed in search results. Include the brand. |
| 3 | +description: Guide to set up private links on Microsoft Energy Data Services #Required; article description that is displayed in search results. |
| 4 | +author: sandeepchads #Required; your GitHub user alias, with correct capitalization. |
| 5 | +ms.author: sancha #Required; microsoft alias of author; optional team alias. |
| 6 | +ms.service: energy-data-services #Required; service per approved list. slug assigned by ACOM. |
| 7 | +ms.topic: how-to #Required; leave this attribute/value as-is. |
| 8 | +ms.date: 09/29/2022 |
| 9 | +ms.custom: template-concept #Required; leave this attribute/value as-is. |
| 10 | +#Customer intent: As a developer, I want to set up private links on Microsoft Energy Data Services |
| 11 | +--- |
| 12 | + |
| 13 | +# Private Links in Microsoft Energy Data Services |
| 14 | +[Azure Private Link](../private-link/private-link-overview.md) provides private connectivity from a virtual network to Azure platform as a service (PaaS). It simplifies the network architecture and secures the connection between endpoints in Azure by eliminating data exposure to the public internet. |
| 15 | +By using Azure Private Link, you can connect to a Microsoft Energy Data Services Preview instance from your virtual network via a private endpoint, which is a set of private IP addresses in a subnet within the virtual network. |
| 16 | + |
| 17 | + |
| 18 | +You can then limit access to your Microsoft Energy Data Services Preview instance over these private IP addresses. |
| 19 | +You can connect to a Microsoft Energy Data Services configured with Private Link by using the automatic or manual approval method. To [learn more](../private-link/private-endpoint-overview.md#access-to-a-private-link-resource-using-approval-workflow), see the Approval workflow section of the Private Link documentation. |
| 20 | + |
| 21 | + |
| 22 | +This article describes how to set up private endpoints for Microsoft Energy Data Services Preview. |
| 23 | + |
| 24 | +## Pre-requisites |
| 25 | + |
| 26 | +1. Create a virtual network in the same subscription as the Microsoft Energy Data Services instance. [Learn more](../virtual-network/quick-create-portal.md). This will allow auto-approval of the private link endpoint. |
| 27 | + |
| 28 | +## Create a private endpoint by using the Azure portal |
| 29 | + |
| 30 | +Use the following steps to create a private endpoint for an existing Microsoft Energy Data Services instance by using the Azure portal: |
| 31 | +1. From the **All resources** pane, choose a Microsoft Energy Data Services Preview instance. |
| 32 | +2. Select **Networking** from the list of settings. |
| 33 | + |
| 34 | + [](media/how-to-manage-private-links/pvtlink-1Networking.png#lightbox) |
| 35 | + |
| 36 | + |
| 37 | +3. Select **Public Access** and select **Enabled from all networks** to allow traffic from all networks. |
| 38 | +4. To block traffic from all networks, select **Disabled**. |
| 39 | +5. Select **Private access** tab and select **Create a private endpoint**, to create a Private Endpoint Connection. |
| 40 | + |
| 41 | + [](media/how-to-manage-private-links/pvtlink-2create-private-endpoint.png#lightbox) |
| 42 | + |
| 43 | +6. In the Create a private endpoint - **Basics pane**, enter or select the following details: |
| 44 | + |
| 45 | + |
| 46 | +|Setting| Value| |
| 47 | +|--------|-----| |
| 48 | +|Project details| |
| 49 | +|Subscription| Select your subscription.| |
| 50 | +|Resource group| Select a resource group.| |
| 51 | +|Instance details| |
| 52 | +|Name| Enter any name for your private endpoint. If this name is taken, create a unique one.| |
| 53 | +|Region| Select the region where you want to deploy Private Link. | |
| 54 | + |
| 55 | +[!NOTE] |
| 56 | +Auto-approval only happens when the Microsoft Energy Data Services Preview instance and the vnet for the private link are in the same subscription. |
| 57 | + |
| 58 | +[](media/how-to-manage-private-links/pvtlink-3basics.png#lightbox) |
| 59 | + |
| 60 | +7. Select **Next: Resource.** |
| 61 | +8. In **Create a private endpoint - Resource**, the following information should be selected or available: |
| 62 | + |
| 63 | +|Setting | Value | |
| 64 | +|--------|--------| |
| 65 | +|Subscription| Your subscription.| |
| 66 | +|Resource type| Microsoft.OpenEnergyPlatform/energyServices| |
| 67 | +|Resource |Your Microsoft Energy Data Services instance.| |
| 68 | +|Target sub-resource| This defaults to MEDS. | |
| 69 | + |
| 70 | +[](media/how-to-manage-private-links/pvtlink-4resource.png#lightbox) |
| 71 | + |
| 72 | + |
| 73 | +9. Select **Next: Virtual Network.** |
| 74 | +10. In the Virtual Network screen, you can: |
| 75 | + |
| 76 | +* Configure Networking and Private IP Configuration settings. [Learn more](../private-link/create-private-endpoint-portal.md#create-a-private-endpoint) |
| 77 | + |
| 78 | +* Configure private endpoint with ASG. [Learn more](../private-link/configure-asg-private-endpoint.md#create-private-endpoint-with-an-asg) |
| 79 | + |
| 80 | +[](media/how-to-manage-private-links/pvtlink-4virtualnetwork.png#lightbox) |
| 81 | + |
| 82 | + |
| 83 | +11. Select **Next: DNS**. You can leave the default settings or learn more about DNS configuration. [Learn more](../private-link/private-endpoint-overview.md#dns-configuration) |
| 84 | + |
| 85 | + |
| 86 | +[](media/how-to-manage-private-links/pvtlink-5dns.png#lightbox) |
| 87 | + |
| 88 | +12. Select **Next: Tags** and add tags to categorize resources. |
| 89 | +13. Select **Review + create**. On the Review + create page, Azure validates your configuration. |
| 90 | +14. When you see the Validation passed message, select **Create**. |
| 91 | + |
| 92 | +[](media/how-to-manage-private-links/pvtlink-6review.png#lightbox) |
| 93 | + |
| 94 | + |
| 95 | +15. Once the deployment is complete, select **Go to resource**. |
| 96 | + |
| 97 | +[](media/how-to-manage-private-links/pvtlink-7deploy.png#lightbox) |
| 98 | + |
| 99 | + |
| 100 | +16. The Private Endpoint created is **Auto-approved**. |
| 101 | + |
| 102 | +[](media/how-to-manage-private-links/pvtlink-8request-response.png#lightbox) |
| 103 | + |
| 104 | +17. Select the **Microsoft Energy Data Services** instance and navigate to the **Networking** tab to see the Private Endpoint created. |
| 105 | + |
| 106 | +[](media/how-to-manage-private-links/pvtlink-9auto-approved.png#lightbox) |
| 107 | + |
| 108 | + |
| 109 | +18. When the Microsoft Energy Data Services and vnet are in different tenants or subscriptions, you will be required to **Approve** or **Reject** the **Private Endpoint** creation request. |
| 110 | + |
| 111 | +[](media/how-to-manage-private-links/pvtlink-10awaitingapproval.png#lightbox) |
| 112 | + |
| 113 | + |
| 114 | +## Next steps |
| 115 | +<!-- Add a context sentence for the following links --> |
| 116 | +> [!div class="nextstepaction"] |
| 117 | +> [How to manage data security and encryption](how-to-manage-data-security-and-encryption.md) |
0 commit comments