Using Private Endpoint for Powerplatform

Power Platform + Azure Integration Validation Checklist

🔧 1. Virtual Network Configuration

• [ ] Ensure non-overlapping CIDR blocks across all VNets (e.g., avoid using 10.0.0.0/16 in both).
• [ ] Confirm VNet peering is established if cross-VNet communication is required.
• [ ] Validate DNS resolution across VNets (especially if using Private DNS Zones).

🔐 2. Private Endpoint Setup

• [ ] Confirm private endpoints are created for each Azure resource (SQL, Storage).
• [ ] If using multiple VNets, verify:
• [ ] Each VNet has its own private endpoint or
• [ ] A shared private endpoint is accessible via peering and DNS zone linking.
• [ ] Ensure Private DNS Zones are linked to all VNets that need to resolve the endpoint.

📡 3. Route Table Configuration

• [ ] Route tables include specific routes to private endpoint IPs.
• [ ] Avoid default routes (0.0.0.0/0) that send traffic to the internet unless explicitly required.
• [ ] Use service tags like AzureSQL, Storage, and PowerPlatform where applicable.
• [ ] Confirm no conflicting UDRs (User Defined Routes) that override private endpoint routing.

🛡️ 4. Network Security Groups (NSGs)

• [ ] NSGs allow traffic to/from Power Platform IP ranges or service tags.
• [ ] NSGs do not block traffic to private endpoint IPs.

🧭 5. Power Platform Environment Settings

• [ ] Environment is configured with VNet injection (if applicable).
• [ ] Subnet delegated to Microsoft.PowerPlatform.
• [ ] CIDR block is at least /25 for production workloads.

🧪 6. Connectivity Testing

• [ ] Test connection to SQL Server and Storage Account from Power Apps.
• [ ] Validate DNS resolution from Power Platform to private endpoint FQDNs.
• [ ] Use tools like nslookup, Test-NetConnection, or Azure Network Watcher for diagnostics.

📄 7. Documentation & Governance

• [ ] Document all private endpoints, DNS zones, and route tables.
• https://learn.microsoft.com/en-us/power-platform/admin/vnet-injection-overview.
• [ ] Ensure compliance with internal security and networking policies.