Merge pull request #228211 from ecfan/patch-2

Azure Logic Apps: Fix per PG

Author: prmerger-automator[bot]

articles/logic-apps/secure-single-tenant-workflow-virtual-network-private-endpoint.md

@@ -6,7 +6,7 @@ ms.suite: integration
 ms.reviewer: estfan, azla
 ms.topic: how-to
 ms.custom: engagement-fy23
-ms.date: 10/03/2022
+ms.date: 02/22/2023
 
 # As a developer, I want to connect to my Standard logic app workflows with virtual networks using private endpoints and virtual network integration.
 ---
@@ -126,10 +126,10 @@ To secure outbound traffic from your logic app, you can integrate your logic app
 
 - For the Azure Logic Apps runtime to work, you need to have an uninterrupted connection to the backend storage. If the backend storage is exposed to the virtual network through a private endpoint, make sure that the following ports are open:
 
-  | Source port | Direction | Protocol | Source / Destination | Purpose |
-  |-------------|-----------|----------|----------------------|---------|
-  | 443 | Outbound | TCP | Subnet integrated with Standard logic app  / Storage account | Storage account |
-  | 445 | Outbound | TCP | Subnet integrated with Standard logic app  / Storage account | Server Message Block (SMB) File Share |
+  | Source port | Destination port | Source | Destination | Protocol | Purpose |
+  |-------------|------------------|--------|-------------|----------|---------|
+  | * | 443 | Subnet integrated with Standard logic app | Storage account | TCP | Storage account |
+  | * | 445 | Subnet integrated with Standard logic app | Storage account | TCP | Server Message Block (SMB) File Share |
 
 - For Azure-hosted managed connectors to work, you need to have an uninterrupted connection to the managed API service. With virtual network integration, make sure that no firewall or network security policy blocks these connections. If your virtual network uses a network security group (NSG), user-defined route table (UDR), or a firewall, make sure that the virtual network allows outbound connections to [all managed connector IP addresses](/connectors/common/outbound-ip-addresses#azure-logic-apps) in the corresponding region. Otherwise, Azure-managed connectors won't work.