Configuring Azure Private Link
Private Link is available to users on the Pro Plus plan.
Azure Private Link is a secure and scalable way to access Azure services over a private endpoint within a virtual network. Using Private Link, traffic between your virtual network and the Azure service travels over the Microsoft backbone network. Data Integration is a SaaS platform that lets you automate and orchestrate data pipelines for any data source.
Supported Azure resource types
Azure Private Link supports connectivity to multiple Azure resource types from Data Integration:
| Resource type | Use case | Resource provider | Sub-resource |
|---|---|---|---|
| Azure SQL Server | Database source/target connectors | Microsoft.Sql/servers | sqlServer |
| Azure Blob Storage | Azure Blob Storage source connector | Microsoft.Storage/storageAccounts | blob |
| Azure Databricks | Azure Databricks connector | refer to Configuring Azure Databricks Private Link | — |
The setup process is the same for all supported resource types. The key difference is the Resource ID format and the sub-resource type used when creating the private endpoint.
Prerequisites
To create an Azure Private Link, you need:
- Datasource Name
- Database Name (If the database exists)
- Region(US/EU/GR)
- Fully Qualified Domain Name (FQDN)
- Resource ID
SQL Server Resource ID
You can find the Resource ID in the JSON View in the Azure portal.
To find the SQL Server Resource ID:
- Navigate to the Azure portal.
- Go to the SQL Server you want to use for the private endpoint.
- Click JSON View located at the top right-hand corner.
- Click Copy.
- The Resource ID appears as follows:
/subscriptions/6dec5fc2-6b85-4599-b5d3-827e26e27e87/resourceGroups/Demo_Resource_Group/providers/Microsoft.Sql/servers/data-integration-demo-sql-server
Azure Blob Storage Resource ID
You can find the Azure Blob Storage Resource ID in the JSON View in the Azure portal.
To find the Azure Blob Storage Resource ID:
- Navigate to the Azure portal.
- Go to your Storage account.
- Click JSON View located at the top right-hand corner.
- Click Copy.
- The Resource ID appears as follows:
/subscriptions/6dec5fc2-6b85-4599-b5d3-827e26e27e87/resourceGroups/Demo_Resource_Group/providers/Microsoft.Storage/storageAccounts/my-storage-account
You need all prerequisites to create an Azure Private Link in Data Integration. Open a Support ticket through the Help menu in the console and provide all the required information.
Approving request from Data Integration
You receive an email requesting approval for Data Integration. \
Procedure
- Navigate to your Azure Portal and locate the virtual network you want to use for the Private Endpoint.
- Go to Networking and select Private Access.
- A message requesting your approval appears.
- Azure Private Link becomes active and ready for use after you approve the request.