Configuring Azure Private Link

Updated 27 July 2026

note

Private Link is available to users on the Pro Plus plan.

Azure Private Link is a secure and scalable way to access Azure services over a private endpoint within a virtual network. Using Private Link, traffic between your virtual network and the Azure service travels over the Microsoft backbone network. Data Integration is a SaaS platform that lets you automate and orchestrate data pipelines for any data source.

Supported Azure resource types

Azure Private Link supports connectivity to multiple Azure resource types from Data Integration:

Resource type	Use case	Resource provider	Sub-resource
Azure SQL Server	Database source/target connectors	Microsoft.Sql/servers	sqlServer
Azure Blob Storage	Azure Blob Storage source connector	Microsoft.Storage/storageAccounts	blob
Azure Databricks	Azure Databricks connector	refer to Configuring Azure Databricks Private Link	—
Generic	For a generic type of resource, or for a resource outside the West Europe or East US Azure regions, you can create a Standard SKU load balancer and configure the target as a backend of that load balancer. This lets you connect to other Azure regions, or publish generic resource types that don't have a supported resource ID.	Microsoft.Network/loadBalancers	—

The setup process is the same for all supported resource types. The key difference is the Resource ID format and the sub-resource type used when creating the private endpoint.

Prerequisites

To create an Azure Private Link, you need:

• Datasource Name: the name you want to assign to this connection in Data Integration.
• Database Name (if the database exists): the name of the specific database on your Azure SQL Server that you want to connect to.
• Region: the Azure region where your resource (SQL Server or Blob Storage) is hosted. Refer to Supported regions for connectivity requirements.
• Fully Qualified Domain Name (FQDN)
• Resource ID

note

You need all prerequisites to create an Azure Private Link in Data Integration. Open a Support ticket through the Help menu in the console and provide all the required information.

Supported regions

Azure Private Link support in Data Integration has two layers of region requirements:

• Azure Private Link as a whole is available from the Data Integration US, EU, and AU production consoles. It's not currently supported for the IL production console.

• Within these three supported Data Integration consoles, direct connection type connections (connecting directly to the resource, not through a load balancer) are supported only for the following Azure region:

  Data Integration production console	Supported Azure region for direct connection
  US	East US
  EU	West Europe
  AU	Australia Southeast

If your resource is located outside of the supported Azure region for your Data Integration production console, create a Standard SKU load balancer in your own Azure subscription and configure the target server as a backend of that load balancer, routing into a supported Azure region.

note

You must create and manage this load balancer in your own Azure subscription. Data Integration does not provision or manage it.

Standard SKU load balancer resource ID

You can find the Resource ID in the JSON View in the Azure portal.

To find the Standard SKU load balancer resource ID:

1. Navigate to the Azure portal.
2. Go to the Load Balancer you want to use for the private endpoint.
3. Click JSON View located at the top right-hand corner.
4. Locate the Resource ID and click Copy.
5. The Resource ID appears as follows:

/subscriptions/4xxxxxxx-56a7-xxxx-b1d1-xxxxxxxx77b8/resourceGroups/SomeRG/providers/Microsoft.Network/loadBalancers/somename-forthe-LB

SQL Server resource ID

You can find the Resource ID in the JSON View in the Azure portal.

To find the SQL Server resource ID:

1. Navigate to the Azure portal.
2. Go to the SQL Server you want to use for the private endpoint.
3. Click JSON View located at the top right-hand corner.
4. Click Copy.
5. The Resource ID appears as follows:

/subscriptions/6dec5fc2-6b85-4599-b5d3-827e26e27e87/resourceGroups/Demo_Resource_Group/providers/Microsoft.Sql/servers/data-integration-demo-sql-server

Azure Blob Storage resource ID

You can find the Azure Blob Storage Resource ID in the JSON View in the Azure portal.

To find the Azure Blob Storage resource ID:

1. Navigate to the Azure portal.
2. Go to your Storage account.
3. Click JSON View located at the top right-hand corner.
4. Click Copy.
5. The Resource ID appears as follows:

/subscriptions/6dec5fc2-6b85-4599-b5d3-827e26e27e87/resourceGroups/Demo_Resource_Group/providers/Microsoft.Storage/storageAccounts/my-storage-account

Refer to Get storage account configuration information in the Microsoft Azure documentation for more information.

note

When using Azure Blob Storage with Private Link, you can authenticate with an Account Key, a SAS Token, or both. A SAS Token on its own is supported.

Approving request from Data Integration

You receive an email requesting approval for Data Integration.

Approving the private endpoint connection in Azure

1. Navigate to your Azure portal and locate the virtual network you want to use for the private endpoint.
2. Go to Networking and select Private Access.
3. A message requesting your approval appears.
4. Azure Private Link becomes active and ready for use after you approve the request.