Skip to content

Commit b93aba3

Browse files
Merge pull request #210389 from Blackmist/note-update
updating note per feedback
2 parents 8debf08 + 0d40013 commit b93aba3

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

articles/machine-learning/how-to-configure-network-isolation-with-v2.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ms.topic: how-to
99
ms.author: jhirono
1010
author: jhirono
1111
ms.reviewer: larryfr
12-
ms.date: 05/13/2022
12+
ms.date: 09/07/2022
1313
---
1414

1515
# Network Isolation Change with Our New API Platform on Azure Resource Manager
@@ -46,13 +46,15 @@ As mentioned in the previous section, there are two types of operations; with AR
4646

4747
With the __new v2 API__, most operations use ARM. So enabling a private endpoint on your workspace doesn't provide the same level of network isolation. Operations that use ARM communicate over public networks, and include any metadata (such as your resource IDs) or parameters used by the operation. For example, the [create or update job](/rest/api/azureml/2022-05-01/jobs/create-or-update) api sends metadata, and [parameters](./reference-yaml-job-command.md).
4848

49-
> [!TIP]
50-
> * Public ARM operations do not surface data in your storage account on public networks.
51-
> * Your communication with public ARM is encrypted using TLS 1.2.
49+
> [!IMPORTANT]
50+
> For most people, using the public ARM communications is OK:
51+
> * Public ARM communications is the standard for management operations with Azure services. For example, creating an Azure Storage Account or Azure Virtual Network uses ARM.
52+
> * The Azure Machine Learning operations do not expose data in your storage account (or other storage in the VNet) on public networks. For example, a training job that runs on a compute cluster in the VNet, and uses data from a storage account in the VNet, would securely access the data directly using the VNet.
53+
> * All communication with public ARM is encrypted using TLS 1.2.
5254
5355
If you need time to evaluate the new v2 API before adopting it in your enterprise solutions, or have a company policy that prohibits sending communication over public networks, you can enable the *v1_legacy_mode* parameter. When enabled, this parameter disables the v2 API for your workspace.
5456

55-
> [!IMPORTANT]
57+
> [!WARNING]
5658
> Enabling v1_legacy_mode may prevent you from using features provided by the v2 API. For example, some features of Azure Machine Learning studio may be unavailable.
5759
5860
## Scenarios and Required Actions

0 commit comments

Comments
 (0)