Private access
CoreAzure Private Link and private endpoints
Private IP access to a specific PaaS resource and associated DNS.
Key points
- Private endpoint is a NIC with a private subnet address mapped to a service resource.
- Private DNS normally maps the standard service name to that private address.
- Connection approval and public network access are separate target-resource settings.
Best-known use cases
- Reach a storage account through a VNet private IP.
- Expose one PaaS resource privately to peered or on-premises networks.
What candidates often confuse it with
- Private endpoint vs service endpoint: private resource IP vs subnet identity to a public endpoint.
- Private Link vs VNet peering: project a service endpoint vs connect VNet address spaces.
Key takeaway
Use a private endpoint when one PaaS resource must be reached through a private IP and complete the DNS plus public-access configuration.
Related services
- Virtual Network service endpoints
Relevant exam tasks
- D4.2.S4 — Configure service endpoints for Azure platform as a service (PaaS)
- D4.2.S5 — Configure private endpoints for Azure PaaS