You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/automation/how-to/private-link-security.md
+14-38Lines changed: 14 additions & 38 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -91,56 +91,32 @@ Before setting up your Automation account resource, consider your network isolat
91
91
92
92
### Connect to a private endpoint
93
93
94
-
Create a private endpoint to connect our network. You can create it in the [Azure portal Private Link center](https://portal.azure.com/#blade/Microsoft_Azure_Network/PrivateLinkCenterBlade/privateendpoints). Once your changes to publicNetworkAccess and Private Link are applied, it can take up to 35 minutes for them to take effect.
94
+
Follow the steps below to create a private endpoint for your Automation account.
95
95
96
-
In this section, you'll create a private endpoint for your Automation account.
96
+
1. Go to [Azure portal Private Link center](https://portal.azure.com/#blade/Microsoft_Azure_Network/PrivateLinkCenterBlade/privateendpoints) to create a private endpoint to connect our network. Once your changes to public Network Access and Private Link are applied, it can take up to 35 minutes for them to take effect.
97
97
98
-
1.On the upper-left side of the screen, select **Create a resource > Networking > Private Link Center**.
98
+
1.In **Private Link Center**, select **Create private endpoint**.
99
99
100
-
2. In **Private Link Center - Overview**, on the option to **Build a private connection to a service**, select **Start**.
100
+
:::image type="content" source="./media/private-link-security/create-private-endpoint.png" alt-text="Screenshot of how to create a private endpoint.":::
101
101
102
-
3. In **Create a virtual machine - Basics**, enter or select the following information:
102
+
1. In **Basics**, enter your **Subscription**, **Resource group**, **Name**, **Network Interface Name**, **Region** and select **Next: Resource**.
103
103
104
-
| Setting | Value |
105
-
| ------- | ----- |
106
-
|**PROJECT DETAILS**||
107
-
| Subscription | Select your subscription. |
108
-
| Resource group | Select **myResourceGroup**. You created this in the previous section. |
109
-
|**INSTANCE DETAILS**||
110
-
| Name | Enter your *PrivateEndpoint*. |
111
-
| Region | Select **YourRegion**. |
112
-
|||
104
+
:::image type="content" source="./media/private-link-security/create-private-endpoint-basics.png" alt-text="Screenshot of how to create a private endpoint in Basics tab.":::
113
105
114
-
4. Select **Next: Resource**.
106
+
1. In **Resource**, In **Connection method**, select the default option - *Connect to an Azure resource in my directory*. Enter the **Subscription**, **Resource type**, and **Resource**. The **Target sub-resource** can either be *Webhook* or *DSCAndHybridWorker* as per your scenario. Select **Next : Virtual Network**.
107
+
108
+
:::image type="content" source="./media/private-link-security/create-private-endpoint-resource-inline.png" alt-text="Screenshot of how to create a private endpoint in Resource tab." lightbox="./media/private-link-security/create-private-endpoint-resource-expanded.png":::
115
109
116
-
5. In **Create a private endpoint - Resource**, enter or select the following information:
110
+
1. In **Virtual Network**, select *Virtual network*, *Subnet*. Enable the checkbox for *Enable network policies for all private endpoints in this subnet*, select *Dynamically allocate IP address* and select ****Next : DNS**.
117
111
118
-
| Setting | Value |
119
-
| ------- | ----- |
120
-
|Connection method | Select connect to an Azure resource in my directory.|
121
-
| Subscription| Select your subscription. |
122
-
| Resource type | Select **Microsoft.Automation/automationAccounts**. |
123
-
| Resource |Select *myAutomationAccount*|
124
-
|Target subresource |Select *Webhook* or *DSCAndHybridWorker* depending on your scenario.|
125
-
|||
112
+
:::image type="content" source="./media/private-link-security/create-private-endpoint-virtual-network-inline.png" alt-text="Screenshot of how to create a private endpoint in Virtual network tab." lightbox="./media/private-link-security/create-private-endpoint-virtual-network-expanded.png":::
126
113
127
-
6.Select **Next: Configuration**.
114
+
1. In **DNS**, the data is populated as per the information entered in the **Basics**, **Resource**, **Virtual Network** and it creates a Private DNS zone. Select the *Integrate with private DNS Zone*, *Subscription* and *Resource group* and select **Next : Tags**
128
115
129
-
7. In **Create a private endpoint - Configuration**, enter or select the following information:
116
+
:::image type="content" source="./media/private-link-security/create-private-endpoint-dns-inline.png" alt-text="Screenshot of how to create a private endpoint in Virtual network tab." lightbox="./media/private-link-security/create-private-endpoint-dns-expanded.png":::
130
117
131
-
| Setting | Value |
132
-
| ------- | ----- |
133
-
|**NETWORKING**||
134
-
| Virtual network| Select *MyVirtualNetwork*. |
135
-
| Subnet | Select *mySubnet*. |
136
-
|**PRIVATE DNS INTEGRATION**||
137
-
|Integrate with private DNS zone |Select **Yes**. |
138
-
|Private DNS Zone |Select *(New)privatelink.azure-automation.net*|
139
-
|||
118
+
1. In **Tags**, you can categorize resources. Select *Name* and *Value* and select **Review + create**. You're taken to the **Review + create** page where Azure validates your configuration.
140
119
141
-
8. Select **Review + create**. You're taken to the **Review + create** page where Azure validates your configuration.
142
-
143
-
9. When you see the **Validation passed** message, select **Create**.
144
120
145
121
In the **Private Link Center**, select **Private endpoints** to view your private link resource.
0 commit comments