You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/machine-learning/how-to-registry-network-isolation.md
+6-4Lines changed: 6 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ ms.custom: build-2023
9
9
author: fkriti
10
10
ms.author: kritifaujdar
11
11
ms.reviewer: larryfr
12
-
ms.date: 05/23/2023
12
+
ms.date: 04/29/2024
13
13
ms.topic: how-to
14
14
---
15
15
@@ -45,7 +45,9 @@ If you don't have a secure workspace configuration, you can create it using the
45
45
:::image type="content" source="./media/how-to-registry-network-isolation/basic-network-isolation-registry.png" alt-text="Diagram of registry connected to Virtual network containing workspace and associated resources using private endpoint.":::
46
46
47
47
## Limitations
48
-
If you are using an Azure Machine Learning registry with network isolation, you won't be able to see the assets in Studio. You also won't be able to perform any operations on Azure Machine Learning registry or assets under it using Studio. Please use the Azure Machine Learning CLI or SDK instead.
48
+
49
+
If you are using an Azure Machine Learning registry with network isolation, you can view *model* assets in Azure Machine Learning studio. You won't be able to view other types of assets. You won't be able to perform any operations on Azure Machine Learning registry or assets under it using studio. Please use the Azure Machine Learning CLI or SDK instead.
50
+
49
51
## Scenario: workspace configuration is secure and Azure Machine Learning registry is public
50
52
51
53
This section describes the scenarios and required network configuration if you have a secure workspace configuration but using a public registry.
@@ -59,7 +61,7 @@ The identity (for example, a Data Scientist's Microsoft Entra user identity) use
59
61
> Sharing a component from Azure Machine Learning workspace to Azure Machine Learning registry is not supported currently.
60
62
61
63
Due to data exfiltration protection, it isn't possible to share an asset from secure workspace to a public registry if the storage account containing the asset has public access disabled. To enable asset sharing from workspace to registry:
62
-
* Go to the **Networking**blade on the storage account attached to the workspace (from where you would like to allow sharing of assets to registry)
64
+
* Go to the **Networking**section of the storage account attached to the workspace (from where you would like to allow sharing of assets to registry)
63
65
* Set __Public network access__ to **Enabled from selected virtual networks and IP addresses**
64
66
* Scroll down and go to __Resource instances__ section. Select __Resource type__ to **Microsoft.MachineLearningServices/registries** and set __Instance name__ to the name of Azure Machine Learning registry resource were you would like to enable sharing to from workspace.
65
67
* Make sure to check rest of the settings as per your network configuration.
@@ -126,7 +128,7 @@ To connect to a registry that's secured behind a VNet, use one of the following
126
128
> Sharing a component from Azure Machine Learning workspace to Azure Machine Learning registry is not supported currently.
127
129
128
130
Due to data exfiltration protection, it isn't possible to share an asset from secure workspace to a private registry if the storage account containing the asset has public access disabled. To enable asset sharing from workspace to registry:
129
-
* Go to the **Networking**blade on the storage account attached to the workspace (from where you would like to allow sharing of assets to registry)
131
+
* Go to the **Networking**section of the storage account attached to the workspace (from where you would like to allow sharing of assets to registry)
130
132
* Set __Public network access__ to **Enabled from selected virtual networks and IP addresses**
131
133
* Scroll down and go to __Resource instances__ section. Select __Resource type__ to **Microsoft.MachineLearningServices/registries** and set __Instance name__ to the name of Azure Machine Learning registry resource were you would like to enable sharing to from workspace.
132
134
* Make sure to check rest of the settings as per your network configuration.
0 commit comments