Merge pull request #231679 from Azure/week3

Private Links Update

Author: Stacyrch140

articles/data-manager-for-agri/how-to-set-up-private-links.md

@@ -0,0 +1,58 @@
+---
+title: Creating a private endpoint for Azure Data Manager for Agriculture
+description: Learn how to use private links in Azure Data Manager for Agriculture
+author: gourdsay #Required; your GitHub user alias, with correct capitalization.
+ms.author: angour
+ms.service: data-manager-for-agri
+ms.topic: how-to #Required; leave this attribute/value as-is.
+ms.date: 03/22/2023
+ms.custom: template-how-to #Required; leave this attribute/value as-is.
+---
+
+# Create a private endpoint for Azure Data Manager for Agriculture
+
+[Azure Private Link](../private-link/private-link-overview.md) provides private connectivity from a virtual network to Azure platform as a service (PaaS). It simplifies the network architecture and secures the connection between endpoints in Azure by eliminating data exposure to the public internet.
+
+By using Azure Private Link, you can connect to an Azure Data Manager for Agriculture service from your virtual network via a private endpoint, which is a set of private IP addresses in a subnet within the virtual network. You can then limit access to your Azure Data Manager for Agriculture Preview instance over these private IP addresses.
+
+This article describes how to create a private endpoint and approval process for Azure Data Manager for Agriculture Preview.
+
+## How to set up a private endpoint
+Private Endpoints can be created using the Azure portal, PowerShell, or the Azure CLI:
+
+*  [Azure portal](../private-link/create-private-endpoint-portal.md)
+*  [PowerShell](../private-link/create-private-endpoint-powershell.md)
+*  [CLI](../private-link/create-private-endpoint-cli.md)
+
+### Approval process for a private endpoint
+Once the network admin creates the private endpoint, the Data Manager for Agriculture admin can manage the private endpoint connection to Data Manager for Agriculture resource.
+
+1. Navigate to the Data Manager for Agriculture resource in Azure portal. Select the Networking tab in the left pane, this will show a list of all Private Endpoint Connections and Corresponding Private Endpoint created.
+  :::image type="content" source="./media/how-to-set-up-private-links/pec-data-manager-agriculture.png" alt-text="Screenshot showing list of private endpoint connections in Azure portal.":::
+
+2. Select an individual private endpoint connection from the list.
+  :::image type="content" source="./media/how-to-set-up-private-links/pec-select.png" alt-text="Screenshot showing how to select a private endpoint.":::
+
+3. The Data Manager for Agriculture administrator can choose to approve or reject a private endpoint connection and can optionally add a short text response also. 
+  :::image type="content" source="./media/how-to-set-up-private-links/pec-approve.png" alt-text="Screenshot showing how to approve a private endpoint connection.":::
+
+4. After approval or rejection, the list will reflect the appropriate state along with the response text. 
+  :::image type="content" source="./media/how-to-set-up-private-links/pec-list-after.png" alt-text="Screenshot showing private endpoint connection status.":::
+
+5. Finally click on the private endpoint name to see the network interface details and IP address of your private endpoint.
+  :::image type="content" source="./media/how-to-set-up-private-links/pec-click.png" alt-text="Screenshot showing where to click to get network interface details.":::
+  :::image type="content" source="./media/how-to-set-up-private-links/pec-list-after.png" alt-text="Screenshot showing private endpoint connection status.":::
+  :::image type="content" source="./media/how-to-set-up-private-links/pec-ip-display-new.png" alt-text="Screenshot showing private endpoint IP address.":::
+
+## Disable public access to your Data Manager for Agriculture resource
+If you want to disable all public access to your Data Manager for Agriculture resource and allow connections only from your virtual network then you need to ensure that your private endpoint connections are enabled and configured. To disable public access to your Data Manager for Agriculture resource:
+
+1. Go to the Networking page of your Data Manager for Agriculture resource.
+2. Select the Deny public network access checkbox.
+
+
+## Next steps
+
+* See the Hierarchy Model and learn how to create and organize your agriculture data  [here](./concepts-hierarchy-model.md).
+* Understand our APIs [here](/rest/api/data-manager-for-agri).
+

articles/data-manager-for-agri/index.yml

@@ -59,3 +59,9 @@ landingContent:
             url: how-to-set-up-sensors-partner.md
           - text: Set up sensors as a customer
             url: how-to-set-up-sensors-customer.md
+  - title: Security
+    linkLists:
+      - linkListType: how-to-guide
+        links:
+          - text: Set up Private Links
+            url: how-to-set-up-private-links.md

articles/data-manager-for-agri/media/how-to-set-up-private-links/pec-approve.png

@@ -30,6 +30,8 @@
       href: how-to-set-up-sensors-partner.md
     - name: Use tissue sampling APIs
       href: how-to-use-nutrient-apis.md
+    - name: Set up Private Links
+      href: how-to-set-up-private-links.md
 - name: References
   items:
   - name: REST API