You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In this article, you'll learn how to scale MLOps across development, testing and production environments. Your environments can vary from few to many based on the complexity of your IT environment and is influenced by factors such as:
19
19
20
-
* Security and compliance policies - do production environments need to be isolated from development environments in terms of access controls, network architecture, data exposure, etc.?
20
+
* Security and compliance policies - Do production environments need to be isolated from development environments in terms of access controls, network architecture, data exposure, etc.?
21
21
* Subscriptions - Are your development environments in one subscription and production environments in a different subscription? Often separate subscriptions are used to account for billing, budgeting, and cost management purposes.
22
22
* Regions - Do you need to deploy to different Azure regions to support latency and redundancy requirements?
23
23
@@ -42,6 +42,6 @@ The following diagram illustrates promotion of pipelines between exploratory and
42
42
43
43
## Next steps
44
44
45
-
*[Create a registry](./how-to-manage-registries.md).
46
-
*[Network isolation with registries](./how-to-registry-network-isolation.md).
47
-
*[Share models, components, and environments using registries](./how-to-share-models-pipelines-across-workspaces-with-registries.md).
45
+
*[Create a registry](./how-to-manage-registries.md)
46
+
*[Network isolation with registries](./how-to-registry-network-isolation.md)
47
+
*[Share models, components, and environments using registries](./how-to-share-models-pipelines-across-workspaces-with-registries.md)
Azure Machine Learning provides preview support for managed virtual network (VNet) isolation. Managed VNet isolation streamlines and automates your network isolation configuration with a built-in, workspace-level Azure Machine Learning managed virtual network.
22
21
@@ -80,7 +79,7 @@ Before following the steps in this article, make sure you have the following pre
80
79
81
80
* The Azure CLI examples in this article use `ws` to represent the name of the workspace, and `rg` to represent the name of the resource group. Change these values as needed when using the commands with your Azure subscription.
82
81
83
-
# [Python](#tab/python)
82
+
# [Python SDK](#tab/python)
84
83
85
84
* An Azure subscription. If you don't have an Azure subscription, create a free account before you begin. Try the [free or paid version of Azure Machine Learning](https://azure.microsoft.com/free/).
86
85
@@ -201,7 +200,7 @@ You can configure a managed VNet using either the `az ml workspace create` or `a
201
200
type: private_endpoint
202
201
```
203
202
204
-
# [Python](#tab/python)
203
+
# [Python SDK](#tab/python)
205
204
206
205
To configure a managed VNet that allows internet outbound communications, use the `ManagedNetwork` class to define a network with `IsolationMode.ALLOW_INTERNET_OUTBOUND`. You can then use the `ManagedNetwork` object to create a new workspace or update an existing one. To define _outbound rules_ to Azure services that the workspace relies on, use the `PrivateEndpointDestination` class to define a new private endpoint to the service.
207
206
@@ -396,7 +395,7 @@ You can configure a managed VNet using either the `az ml workspace create` or `a
396
395
type: private_endpoint
397
396
```
398
397
399
-
# [Python](#tab/python)
398
+
# [Python SDK](#tab/python)
400
399
401
400
To configure a managed VNet that allows only approved outbound communications, use the `ManagedNetwork` class to define a network with `IsolationMode.ALLOw_ONLY_APPROVED_OUTBOUND`. You can then use the `ManagedNetwork` object to create a new workspace or update an existing one. To define _outbound rules_ to Azure services that the workspace relies on, use the `PrivateEndpointDestination` class to define a new private endpoint to the service.
402
401
@@ -541,7 +540,7 @@ To configure a managed VNet that allows only approved outbound communications, u
541
540
## Configure for serverless spark jobs
542
541
543
542
> [!TIP]
544
-
> The steps in this section are only needed for Spark serverless. If you are using [serverless compute cluster](how-to-use-serverless-compute.md), you can skip this section.
543
+
> The steps in this section are only needed for __Spark serverless__. If you are using [serverless __compute cluster__](how-to-use-serverless-compute.md), you can skip this section.
545
544
546
545
To enable the [serverless spark jobs](how-to-submit-spark-jobs.md) for the managed VNet, you must perform the following actions:
547
546
@@ -576,7 +575,7 @@ To enable the [serverless spark jobs](how-to-submit-spark-jobs.md) for the manag
576
575
az ml workspace update --file workspace_pe.yml --resource_group rg --name ws
577
576
```
578
577
579
-
# [Python](#tab/python)
578
+
# [Python SDK](#tab/python)
580
579
581
580
The following example demonstrates how to create a managed VNet for an existing Azure Machine Learning workspace named `myworkspace`. It also adds a private endpoint for the Azure Storage Account and sets `spark_enabled=true`:
582
581
@@ -633,7 +632,7 @@ To enable the [serverless spark jobs](how-to-submit-spark-jobs.md) for the manag
633
632
az ml workspace provision-network -g my_resource_group -n my_workspace_name --include-spark
634
633
```
635
634
636
-
# [Python](#tab/python)
635
+
# [Python SDK](#tab/python)
637
636
638
637
The following example shows how to provision a managed VNet for serverless spark jobs:
639
638
@@ -675,7 +674,7 @@ To remove an outbound rule from the managed VNet, use the following command:
675
674
az ml workspace outbound-rule remove --rule rule-name --workspace-name ws --resource-group rg
676
675
```
677
676
678
-
# [Python](#tab/python)
677
+
# [Python SDK](#tab/python)
679
678
680
679
The following example demonstrates how to manage outbound rules for a workspace named `myworkspace`:
681
680
@@ -736,4 +735,4 @@ Currently we don't have any recommended outbound rules.
0 commit comments