22-25 April 2026

Secure your data with Private Networking

Proposed session for SQLBits 2026

TL; DR

Azure PaaS services are by default exposed via public endpoints. This session shows how to secure data platforms with end-to-end private networking. Learn core Azure networking concepts, hybrid scenarios, cost impacts, and hands-on implementations for Fabric, Databricks, SQL MI, and SQL DB.

Session Details

Most, if not all, PaaS services in Azure have the default configuration public network access, meaning routing the traffic over the Internet. The sad reality is that bad actors are getting better every day to find ways to breach your defenses and exfiltrate your data or worse.
To begin to remedy this, either due to compliance requirements or just common sense, you are now tasked with making sure the network traffic from your users to your data are protected using end-to-end private networking. You know your data platform PaaS services but have limited network experience and are at a bit of a loss on how to proceed.

There are some differences in implementation and caveats for the different data platform PaaS and this session will cover those for Microsoft Fabric, Databricks, Managed Instance and SQL Database.

In this session we will go through the following:
- An overview of how networking in general works in Azure
- Which network components you should learn and understand
- How to secure traffic from your application to your data
- How to solve hybrid scenarios where parts of the application is running on-premises or at another cloud vendor
- What cost implications there are for implementing private networking

Join me in this session to learn about securing and accessing your data privately.

All code to provision a working implementation of the different data platform PaaS using private networking will be made available for you free to use when you get back home.

3 things you'll get out of this session

Understand core Azure networking concepts required to secure data platform PaaS services Learn how to implement end-to-end private access, including hybrid and on-prem scenarios Get practical patterns and code to deploy secure networking for Fabric, Databricks, and SQL services