Merge pull request #174542 from asudbring/privlink-paas

Edited powershell and CLI commands to update article

Author: GitHubber17

articles/private-link/manage-private-endpoint.md

@@ -1,44 +1,57 @@
 ---
 title: Manage a Private Endpoint connection in Azure
+titleSuffix: Azure Private Link
 description: Learn how to manage private endpoint connections in Azure
 services: private-link
-author: malopMSFT
+author: asudbring
 ms.service: private-link
 ms.topic: how-to
-ms.date: 09/16/2019
+ms.date: 10/04/2021
 ms.author: allensu 
 ms.custom: devx-track-azurepowershell
 
 ---
 # Manage a Private Endpoint connection
-Azure Private Link works on an approval call flow model wherein the Private Link service consumer can request a connection to the service provider for consuming the service. The service provider can then decide whether to allow the consumer to connect or not. Azure Private Link enables the service providers to manage the private endpoint connection on their resources. This article provides instructions about how to manage the Private Endpoint connections.
+
+Azure Private Link works on an approval model where the Private Link service consumer can request a connection to the service provider for consuming the service. 
+
+The service provider can then decide whether to allow the consumer to connect or not. Azure Private Link enables service providers to manage the private endpoint connection on their resources. 
+
+This article provides instructions about how to manage the Private Endpoint connections.
 
 ![Manage Private Endpoints](media/manage-private-endpoint/manage-private-endpoint.png)
 
 There are two connection approval methods that a Private Link service consumer can choose from:
-- **Automatic**: If the service consumer has Azure RBAC permissions on the service provider resource, the consumer can choose the automatic approval method. In this case, when the request reaches the service provider resource, no action is required from the service provider and the connection is automatically approved. 
-- **Manual**: On the contrary, if the service consumer doesn’t have Azure RBAC permissions on the service provider resource, the consumer can choose the manual approval method. In this case, the connection request appears on the service resources as **Pending**. The service provider has to manually approve the request before connections can be established. 
+
+- **Automatic**: If the service consumer has Azure Role Based Access Control permissions on the service provider resource, the consumer can choose the automatic approval method. When the request reaches the service provider resource, no action is required from the service provider and the connection is automatically approved. 
+
+- **Manual**: If the service consumer doesn’t have Azure Role Based Access Control permissions on the service provider resource, the consumer can choose the manual approval method. The connection request appears on the service resources as **Pending**. The service provider has to manually approve the request before connections can be established. 
 In manual cases, service consumer can also specify a message with the request to provide more context to the service provider. The service provider has following options to choose from for all Private Endpoint connections: **Approved**, **Reject**, **Remove**.
 
-The below table shows the various service provider actions and the resulting connection states for Private Endpoints.  The service provider can also change the connection state of private endpoint connection at a later time without consumer intervention. The action will update the state of the endpoint on the consumer side. 
+The below table shows the various service provider actions and the resulting connection states for Private Endpoints. The service provider can change the connection state at a later time without consumer intervention. The action will update the state of the endpoint on the consumer side. 
 
 
-|Service Provider Action   |Service Consumer Private Endpoint State   |Description   |
+| Service Provider Action  | Service Consumer Private Endpoint State | Description |
 |---------|---------|---------|
-|None    |    Pending     |    Connection is created manually and is pending for approval by the Private Link resource owner.       |
-|Approve    |  Approved       |  Connection was automatically or manually approved and is ready to be used.     |
-|Reject     | Rejected        | Connection was rejected by the private link resource owner.        |
-|Remove    |  Disconnected       | Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean up.        |
-|   |         |         |
-   
-## Manage Private Endpoint Connections on Azure PaaS resources
-Portal is the preferred method for managing private endpoint connections on Azure PaaS resources. 
-
-1. Sign in to the Azure portal at https://portal.azure.com.
-2. Navigate to Private Link Center.
-3. Under **Resources**, select the resource type you want to manage the private endpoint connections.
-4. For each of your resource type, you can view the number of Private Endpoint Connections associated with it. You can filter the resources as needed.
-5. Select the private endpoint connections.  Under the connections listed, select the connection that you want to manage. 
+| None    |    Pending     |    Connection is created manually and is pending for approval by the Private Link resource owner.       |
+| Approve    |  Approved       |  Connection was automatically or manually approved and is ready to be used.     |
+| Reject     | Rejected        | Connection was rejected by the private link resource owner.        |
+| Remove    |  Disconnected       | Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.        |
+
+## Manage Private Endpoint connections on Azure PaaS resources
+
+The Azure portal is the preferred method for managing private endpoint connections on Azure PaaS resources. 
+
+1. Sign in to the [Azure portal](https://portal.azure.com).
+
+2. In the search box at the top of the portal, enter **Private link**. In the search results, select **Private link**.
+
+3. In the **Private link center**, select **Private endpoints** or **Private link services**.
+
+4. For each of your endpoints, you can view the number of Private Endpoint connections associated with it. You can filter the resources as needed.
+
+5. Select the private endpoint.  Under the connections listed, select the connection that you want to manage. 
+
 6. You can change the state of the connection by selecting from the options at the top.
 
 ## Manage Private Endpoint connections on a customer/partner owned Private Link service
@@ -48,41 +61,80 @@ Azure PowerShell and Azure CLI are the preferred methods for managing Private En
 ### PowerShell 
 
 Use the following PowerShell commands to manage private endpoint connections.  
+
 #### Get Private Link connection states 
-Use the `Get-AzPrivateLinkService` cmdlet to get the Private Endpoint connections and their states.  
+
+Use [Get-AzPrivateEndpointConnection](/powershell/module/az.network/get-azprivateendpointconnection) to get the Private Endpoint connections and their states.  
+
 ```azurepowershell
-Get-AzPrivateLinkService -Name myPrivateLinkService -ResourceGroupName myResourceGroup 
- ```
+Get-AzPrivateEndpointConnection -Name myPrivateLinkService -ResourceGroupName myResourceGroup 
+```
 
 #### Approve a Private Endpoint connection 
 
-Use the `Approve-AzPrivateEndpointConnection` cmdlet to approve a Private Endpoint connection. 
+Use [Approve-AzPrivateEndpointConnection](/powershell/module/az.network/approve-azprivateendpointconnection) cmdlet to approve a Private Endpoint connection. 
 
 ```azurepowershell
 Approve-AzPrivateEndpointConnection -Name myPrivateEndpointConnection -ResourceGroupName myResourceGroup -ServiceName myPrivateLinkService
 ```
 
 #### Deny Private Endpoint connection 
 
-Use the `Deny-AzPrivateEndpointConnection` cmdlet to reject a Private Endpoint connection. 
+Use [Deny-AzPrivateEndpointConnection](/powershell/module/az.network/deny-azprivateendpointconnection) cmdlet to reject a Private Endpoint connection. 
+
 ```azurepowershell
 Deny-AzPrivateEndpointConnection -Name myPrivateEndpointConnection -ResourceGroupName myResourceGroup -ServiceName myPrivateLinkService 
 ```
-#### Remove Private Endpoint Connection 
+
+#### Remove Private Endpoint connection 
 
-Use the `Remove-AzPrivateEndpointConnection` cmdlet to remove a Private Endpoint connection. 
+Use [Remove-AzPrivateEndpointConnection](/powershell/module/az.network/remove-azprivateendpointconnection) cmdlet to remove a Private Endpoint connection. 
+
 ```azurepowershell
-Remove-AzPrivateEndpointConnection -Name myPrivateEndpointConnection1 -ResourceGroupName myResourceGroup -ServiceName myPrivateLinkServiceName 
+Remove-AzPrivateEndpointConnection -Name myPrivateEndpointConnection -ResourceGroupName myResourceGroup -ServiceName myPrivateLinkService
 ```
 
 ### Azure CLI 
 
-Use `az network private-link-service update` for managing your Private Endpoint connections. The connection state is specified in the ```azurecli connection-status``` parameter. 
+#### Get Private Link connection states 
+
+Use [az network private-endpoint-connection show](/cli/azure/network/private-endpoint-connection#az_network_private_endpoint_connection_show)  to get the Private Endpoint connections and their states.  
+
+```azurecli
+  az network private-endpoint-connection show \
+    --name myPrivateEndpointConnection \
+    --resource-group myResourceGroup
+```
+ 
+#### Approve a Private Endpoint connection 
+ 
+Use [az network private-endpoint-connection approve](/cli/azure/network/private-endpoint-connection#az_network_private_endpoint_connection_approve) cmdlet to approve a Private Endpoint connection. 
+ 
 ```azurecli
-az network private-link-service connection update -g myResourceGroup -n myPrivateEndpointConnection1 --service-name myPLS --connection-status Approved 
+  az network private-endpoint-connection approve \
+    --name myPrivateEndpointConnection  \
+    --resource-group myResourceGroup
+```
+ 
+#### Deny Private Endpoint connection 
+ 
+Use [az network private-endpoint-connection reject](/cli/azure/network/private-endpoint-connection#az_network_private_endpoint_connection_reject) cmdlet to reject a Private Endpoint connection. 
+
+```azurecli
+  az network private-endpoint-connection reject \
+    --name myPrivateEndpointConnection  \
+    --resource-group myResourceGroup
 ```
 
-   
+#### Remove Private Endpoint connection 
+ 
+Use [az network private-endpoint-connection delete](/cli/azure/network/private-endpoint-connection#az_network_private_endpoint_connection_delete) cmdlet to remove a Private Endpoint connection. 
+
+```azurecli
+  az network private-endpoint-connection delete \
+    --name myPrivateEndpointConnection \
+    --resource-group myResourceGroup
+```
 
 ## Next steps
 - [Learn about Private Endpoints](private-endpoint-overview.md)