Merge pull request #220805 from asudbring/pl-ddos-posh

Added DDoS info for virtual network creates in QS for Private Link Service - Powershell

Author: prmerger-automator[bot]

articles/private-link/create-private-link-service-powershell.md

@@ -32,6 +32,19 @@ New-AzResourceGroup -Name 'CreatePrivLinkService-rg' -Location 'eastus2'
 
 ```
 
+### Create a DDoS Protection plan
+
+Create a DDoS Protection plan with [New-AzDdosProtectionPlan](/powershell/module/az.network/new-azddosprotectionplan) to associate with the virtual network. This example creates a DDoS Protection plan named **myDDoSPlan** in the **EastUS** location:
+
+```azurepowershell-interactive
+$ddosplan = @{
+    Name = 'myDDoSPlan'
+    ResourceGroupName = 'CreatePrivateEndpointQS-rg'
+    Location = 'eastus2'
+}
+New-AzDdosProtectionPlan @ddosplan
+```
+
 ## Create an internal load balancer
 
 In this section, you'll create a virtual network and an internal Azure Load Balancer.
@@ -43,6 +56,9 @@ In this section, you create a virtual network and subnet to host the load balanc
 * Create a virtual network with [New-AzVirtualNetwork](/powershell/module/az.network/new-azvirtualnetwork).
 
 ```azurepowershell-interactive
+## Place DDoS plan created previously into a variable. ##
+$ddosplan = Get-AzDdosProtectionPlan -ResourceGroupName CreatePrivateEndpointQS-rg -Name myDDosPlan
+
 ## Create backend subnet config ##
 $subnet = @{
     Name = 'mySubnet'
@@ -58,6 +74,7 @@ $net = @{
     Location = 'eastus2'
     AddressPrefix = '10.1.0.0/16'
     Subnet = $subnetConfig
+    DDoSProtectionPlan = $ddosplan.Id
 }
 $vnet = New-AzVirtualNetwork @net
 
@@ -181,6 +198,9 @@ In this section, you'll map the private link service to a private endpoint. A vi
 * Create a virtual network with [New-AzVirtualNetwork](/powershell/module/az.network/new-azvirtualnetwork).
 
 ```azurepowershell-interactive
+## Place DDoS plan created previously into a variable. ##
+$ddosplan = Get-AzDdosProtectionPlan -ResourceGroupName CreatePrivateEndpointQS-rg -Name myDDosPlan
+
 ## Create backend subnet config ##
 $subnet = @{
     Name = 'mySubnetPE'
@@ -196,6 +216,7 @@ $net = @{
     Location = 'eastus2'
     AddressPrefix = '11.1.0.0/16'
     Subnet = $subnetConfig
+    DDoSProtectionPlan = $ddosplan.Id
 }
 $vnetpe = New-AzVirtualNetwork @net
 
@@ -288,7 +309,7 @@ $pe = Get-AzPrivateEndpoint @par1
 $pe.NetworkInterfaces[0].IpConfigurations[0].PrivateIpAddress
 ```
 
-```bash
+```powershell
 ❯ $pe.NetworkInterfaces[0].IpConfigurations[0].PrivateIpAddress
 11.1.0.4
 ```
@@ -306,6 +327,7 @@ Remove-AzResourceGroup -Name 'CreatePrivLinkService-rg'
 In this quickstart, you:
 
 * Created a virtual network and internal Azure Load Balancer.
+
 * Created a private link service
 
 To learn more about Azure Private endpoint, continue to: