Today, I worked on an interesting service that our customer has implemented a Private Endpoint for Azure SQL Database and they want that only some subnets of the VNET might be able to connect, they asked how to do it.
Well, the first thing that we need to know is that the configuration that we have defined in our Azure SQL Server (Firewalls and virtual networks) won't have effect when you are using Private Endpoint and if you need to protect your Private Endpoint in your VNET/Subnet you need to use NSG.
Using NSG will be one of the alternatives to meet the requiriments to allow/deny connection to your Private Endpoint from specific subnets.
Enjoy!
Published Feb 24, 2022
Version 1.0Jose_Manuel_Jurado
Microsoft
Joined November 29, 2018
Azure Database Support Blog
Follow this blog board to get notified when there's new activity