You're reading from Designing and Implementing Microsoft Azure Networking Solutions

Product typeBook

Published inAug 2023

PublisherPackt

ISBN-139781803242033

Edition1st Edition

Tools

Azure

Concepts

Networking

Author (1)

David Okeyode

Designing and Implementing Platform Service Connectivity

Azure offers various platform services, such as Azure SQL Database, Azure Storage, Azure Key Vault, and Azure App Service, that are widely used by organizations. These services come with several advantages, such as easy deployment, automatic scaling, built-in backups, and high availability. While it is advisable to deploy platform services in a customer-managed virtual network for better control over network traffic, this may not always be possible, mainly due to technical limitations. When deploying platform services outside of customer-managed virtual networks, there are three main options available for controlling network connections to the services in Azure. This chapter will provide you with a clear understanding of these three options. It will also guide you in determining the appropriate option to use based on your specific use case. By the end of this chapter, you will have a good understanding of the following:

...

Technical requirements

To follow along with the instructions in this chapter, you will need the following:

A PC with an internet connection
An Azure subscription

Implementing platform service network security

Services such as Azure Storage and Azure Key Vault cannot be deployed into a customer-managed Azure virtual network. At the time of writing, only 29 platform services can be deployed to a customer-managed virtual network. Additionally, deploying supported services in a private network can be expensive. For example, deploying an Azure App Service into a private network with App Service Environment costs more than deploying a normal App Service.

When deploying platform services outside of customer-managed virtual networks, there are options available for controlling network connections to the services in Azure. These options include the platform service firewall, private endpoints, and service endpoints (see Figure 10.1):

Figure 10.1 – Options for controlling inbound network connections to platform services in Azure

Let’s get started with the platform service firewall option!

Note

For...

Summary

In this chapter, we provided insights into the options available for managing network connections to Azure platform services. We discussed and implemented a platform service firewall and exceptions, a service endpoint, and a private endpoint. This chapter has provided you with the knowledge and skills necessary to control network connections to Azure platform services effectively. This information is also crucial for the AZ-700 – Azure Network Engineer certification exam.

In the final chapter of this book, we will focus on network monitoring in Azure. Thank you, and we look forward to seeing you there!

David is the EMEA Azure CTO at Palo Alto Networks. Before that, he was an independent consultant helping companies secure their Azure environments through private expert level trainings and assessments. He has authored two books on Azure security - "Penetration Testing Azure for Ethical Hackers" and "Microsoft Azure Security Technologies Certification and Beyond. He has also authored multiple cloud computing courses for popular platforms like LinkedIn Learning. He holds over 15 cloud certifications and has over a decade of experience in Cybersecurity (consultancy, design, implementation). David is married to a lovely girl who makes the best banana cake in the world. They love travelling the world together!
Read more about David Okeyode

Personalised recommendations for you

Based on your interests and search pattern

Designing and Implementing Microsoft Azure Networking Solutions

Designing and Implementing Microsoft Azure Networking Solutions Exam Ref AZ-700 is an all-encompassing guide to the AZ-700 exam and contains all the information you need to succeed in the world of virtual networking with Azure. With this book, you will be fully prepared for the exam and the world of cloud networking.

BookAug 2023524 pages

Microsoft 365 Security, Compliance, and Identity Administration

The Microsoft 365 Security, Compliance, and Identity Administration is a comprehensive guide that helps you employ Microsoft 365's robust suite of features and empowers you to optimize your administrative tasks.

BookAug 2023630 pages

Zero Trust Overview and Playbook Introduction

Get started on Zero Trust with this step-by-step playbook and learn everything you need to know for a successful Zero Trust journey with tailored guidance for every role, covering strategy, operations, architecture, implementation, and measuring success. This book will become an indispensable reference for everyone in your organization.

BookOct 2023240 pages

The Self-Taught Cloud Computing Engineer

This self-study book helps you master multiple clouds, including AWS, Azure, and GCP, and serves as a roadmap to becoming a certified cloud computing expert. The book will guide you to develop a professional cloud career by helping you build a broad cloud knowledge base, developing hands-on cloud computing skills, and getting cloud certified.

BookSep 2023472 pages

Technology Operating Models for Cloud and Edge

This book will help you build and create ownership of a technology operating model, as well as connect your leadership with engineering and operations, keeping your internal and external customers in mind. It provides practical tips on why, where, and how to make the cloud and edge platform paradigm sing for you, your team, and your organization.

BookAug 2023228 pages

Azure Architecture Explained

Azure is the preferred platform to build mission-critical and secure apps. This book provides comprehensive coverage of essential Azure products, services, and solutions vital for every solution architect's success. Elevate your knowledge and master the critical components of Azure to excel in your role with Azure Architecture Explained.

BookSep 2023446 pages

Pentesting Active Directory and Windows-based Infrastructure

This practical guide helps you explore the pentesting of Microsoft infrastructure in detail, and enhances your offensive skillset by showing you the different ways to perform security assessment. This book will help blue teamers and IT engineers get up to speed with possible security issues they may encounter in their Windows environments.

BookNov 2023360 pages

Practical Ansible

In Practical Ansible, you'll work with the latest release of Ansible and learn to solve complex issues quickly with the help of task-oriented scenarios. You'll start by installing and configuring Ansible to automate monotonous and repetitive IT tasks and get to grips with concepts such as playbooks, inventories, plugins, collections, and network modules.

BookSep 2023420 pages

Windows 11 for Enterprise Administrators

Microsoft’s launch of Windows 11 is a step toward satisfying the enterprise administrator’s needs for better management and enhanced user experience customization. This book provides the enterprise administrator with the knowledge needed to fully utilize the advanced feature set of Windows 11 Enterprise.

BookOct 2023286 pages

The Linux DevOps Handbook

This book is for software and IT professionals seeking knowledge on Linux systems and DevOps practices. This book will provide you with guidance and tools to learn and gain proficiency in managing Linux-based infrastructures and knowledge of DevOps.

BookNov 2023428 pages2