Skip to content

Commit e4c66d3

Browse files
committed
added procedure and images
1 parent 565c54b commit e4c66d3

9 files changed

+14
-38
lines changed
45.3 KB
Loading
61 KB
Loading
61 KB
Loading
65.3 KB
Loading
65.3 KB
Loading
76.8 KB
Loading
76.8 KB
Loading
65.4 KB
Loading

articles/automation/how-to/private-link-security.md

Lines changed: 14 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -91,56 +91,32 @@ Before setting up your Automation account resource, consider your network isolat
9191

9292
### Connect to a private endpoint
9393

94-
Create a private endpoint to connect our network. You can create it in the [Azure portal Private Link center](https://portal.azure.com/#blade/Microsoft_Azure_Network/PrivateLinkCenterBlade/privateendpoints). Once your changes to publicNetworkAccess and Private Link are applied, it can take up to 35 minutes for them to take effect.
94+
Follow the steps below to create a private endpoint for your Automation account.
9595

96-
In this section, you'll create a private endpoint for your Automation account.
96+
1. Go to [Azure portal Private Link center](https://portal.azure.com/#blade/Microsoft_Azure_Network/PrivateLinkCenterBlade/privateendpoints) to create a private endpoint to connect our network. Once your changes to public Network Access and Private Link are applied, it can take up to 35 minutes for them to take effect.
9797

98-
1. On the upper-left side of the screen, select **Create a resource > Networking > Private Link Center**.
98+
1. In **Private Link Center**, select **Create private endpoint**.
9999

100-
2. In **Private Link Center - Overview**, on the option to **Build a private connection to a service**, select **Start**.
100+
:::image type="content" source="./media/private-link-security/create-private-endpoint.png" alt-text="Screenshot of how to create a private endpoint.":::
101101

102-
3. In **Create a virtual machine - Basics**, enter or select the following information:
102+
1. In **Basics**, enter your **Subscription**, **Resource group**, **Name**, **Network Interface Name**, **Region** and select **Next: Resource**.
103103

104-
| Setting | Value |
105-
| ------- | ----- |
106-
| **PROJECT DETAILS** | |
107-
| Subscription | Select your subscription. |
108-
| Resource group | Select **myResourceGroup**. You created this in the previous section. |
109-
| **INSTANCE DETAILS** | |
110-
| Name | Enter your *PrivateEndpoint*. |
111-
| Region | Select **YourRegion**. |
112-
|||
104+
:::image type="content" source="./media/private-link-security/create-private-endpoint-basics.png" alt-text="Screenshot of how to create a private endpoint in Basics tab.":::
113105

114-
4. Select **Next: Resource**.
106+
1. In **Resource**, In **Connection method**, select the default option - *Connect to an Azure resource in my directory*. Enter the **Subscription**, **Resource type**, and **Resource**. The **Target sub-resource** can either be *Webhook* or *DSCAndHybridWorker* as per your scenario. Select **Next : Virtual Network**.
107+
108+
:::image type="content" source="./media/private-link-security/create-private-endpoint-resource-inline.png" alt-text="Screenshot of how to create a private endpoint in Resource tab." lightbox="./media/private-link-security/create-private-endpoint-resource-expanded.png":::
115109

116-
5. In **Create a private endpoint - Resource**, enter or select the following information:
110+
1. In **Virtual Network**, select *Virtual network*, *Subnet*. Enable the checkbox for *Enable network policies for all private endpoints in this subnet*, select *Dynamically allocate IP address* and select ****Next : DNS**.
117111

118-
| Setting | Value |
119-
| ------- | ----- |
120-
|Connection method | Select connect to an Azure resource in my directory.|
121-
| Subscription| Select your subscription. |
122-
| Resource type | Select **Microsoft.Automation/automationAccounts**. |
123-
| Resource |Select *myAutomationAccount*|
124-
|Target subresource |Select *Webhook* or *DSCAndHybridWorker* depending on your scenario.|
125-
|||
112+
:::image type="content" source="./media/private-link-security/create-private-endpoint-virtual-network-inline.png" alt-text="Screenshot of how to create a private endpoint in Virtual network tab." lightbox="./media/private-link-security/create-private-endpoint-virtual-network-expanded.png":::
126113

127-
6. Select **Next: Configuration**.
114+
1. In **DNS**, the data is populated as per the information entered in the **Basics**, **Resource**, **Virtual Network** and it creates a Private DNS zone. Select the *Integrate with private DNS Zone*, *Subscription* and *Resource group* and select **Next : Tags**
128115

129-
7. In **Create a private endpoint - Configuration**, enter or select the following information:
116+
:::image type="content" source="./media/private-link-security/create-private-endpoint-dns-inline.png" alt-text="Screenshot of how to create a private endpoint in Virtual network tab." lightbox="./media/private-link-security/create-private-endpoint-dns-expanded.png":::
130117

131-
| Setting | Value |
132-
| ------- | ----- |
133-
|**NETWORKING**| |
134-
| Virtual network| Select *MyVirtualNetwork*. |
135-
| Subnet | Select *mySubnet*. |
136-
|**PRIVATE DNS INTEGRATION**||
137-
|Integrate with private DNS zone |Select **Yes**. |
138-
|Private DNS Zone |Select *(New)privatelink.azure-automation.net* |
139-
|||
118+
1. In **Tags**, you can categorize resources. Select *Name* and *Value* and select **Review + create**. You're taken to the **Review + create** page where Azure validates your configuration.
140119

141-
8. Select **Review + create**. You're taken to the **Review + create** page where Azure validates your configuration.
142-
143-
9. When you see the **Validation passed** message, select **Create**.
144120

145121
In the **Private Link Center**, select **Private endpoints** to view your private link resource.
146122

0 commit comments

Comments
 (0)