SQLBits 2023

Taking the "Public" out of Public Clouds: Getting Started with Private Endpoints

Learn the basics of private endpoints, including what they are, why the make your platform more secure, how to deploy and configure them, and common mistakes to avoid.
If you're working in the cloud, sooner or later you'll come across someone who cries out that the cloud is not secure, that your data is exposed to the internet as a whole. With the right structures in place, this is simply not true… but what are the right structures? How do you go about changing a public-facing resource into a private resource only accessible from your own networks, whilst still retaining all the benefits of the cloud? This is where private endpoints come in - they're a powerful tool you can use to secure your Azure data estate.

We’ll begin by covering what a private endpoint is and why they make your platform more secure. We’ll then go through the core elements required to facilitate private endpoint connectivity, including Private DNS Zones, A Records and Virtual Network Links. We’ll also step through a demo of how to deploy and configure a private endpoint, and we’ll wrap up by discussing some common mistakes to avoid when working with private endpoints.