Leon Welicki: Hello there and thank you very much for
joining us today in this new Azure Portal How To video.
Today, we learn how to securely connect to a Storage
Account using private links.
And for that, we have Misha Dhar, who is going to show us
how to do that. So, thank you very much for
joining us today, Misha.
Misha Dhar: Thanks for having me, Leon.
It's great to be here. Why don't we jump right into it.
So today, we're going to show you the new private link in
the Azure Portal.
And you could find that if I could type properly, by
searching.
I, of course, have it pinned because I'm using it a lot.
And the good thing about private link is that it allows
your resources to communicate with each other along with
the Microsoft backbone, as opposed to having traffic
flowing along the public internet.
This keeps your data secure and safe away from prying
eyes.
So, why don't we create a private endpoint in order to
build a connection to our service?
And so, what we're going to do here is fill in some
basics, first, our resource group and a name for our
private endpoint.
And then now that we have that set, we can keep on going.
So, today, we're going to connect to a resource in our
own directory.
You can also connect to somebody else's resource in a
different directory and a different subscription.
But that's a story for another day.
And so, we already have our subscription set.
Since we're going to connect our Storage Account, why
don't we select that here.
And then here, we can choose the specific Storage Account
we're going to connect to.
And then lastly, we need to choose the sub resource behind
the Storage Account that we want to access.
And Storage Accounts have several different sub resources
like tables, files, queues, but today we're going to
connect to a blob.
And so, this is everything we need for our resource.
And so, why don't we move onto the other side of the
private link.
So, this is where you choose the subnet and VNet that'll
have access to connect to your Storage Account.
And so, let me choose my VNet.
And the subnet's there by default.
And lastly, we need to decide whether we want private DNS
integration.
For most customers, you want to integrate here.
Because this will ensure that traffic will flow cleanly
between your VNet and your storage account.
And so, we already have it chosen to yes and just make
sure that we have it within our VNet and we can move on.
And so, you can set tags if you'd like.
We don't need to do that today.
And then we can move to review and create.
So, we'll have a validation that'll run.
Looks like it passed.
And now, we can review all the settings we elected during
our creation time.
And looks like everything's okay, nothing I need to change
right now. So, why don't we go and create this, Leon?
Leon: Go for it.
Misha: Alright. So, our private endpoint's been created.
Once it's fully deployed,
there will be a private link connecting the VNet that we
just specified to the Storage Account that we just
specified and all traffic that flows along that will be
safe and secure within the Microsoft Azure Cloud.
And you can still connect your storage account using the
same mechanisms that you do today over the public
internet. You can use your REST APIs,
you can use SMD, you can use your connection strings.
That'll all work the exact same way.
It's just that the connection would be as secure as we can
make it.
Leon: Thank you very much for showing us, Misha.
Misha: My pleasure. Leon: And thanks every
one of you for watching.
Please try this out and let us know what you think.
Leave us a comment in the comments section.
Follow us on Twitter and look forward to seeing you in the
next video. Thanks for watching.