You have an Azure subscription that contains a virtual network named VNet1 and a storage account named stcorpdata. You need to configure secure private access to the storage account from VNet1 using a private endpoint. The solution must ensure that resources in VNet1 can resolve the storage account's FQDN to its private IP address. Which sequence of steps should you perform to complete the configuration?
- 1Create a private DNS zone named privatelink.blob.core.windows.net.
- 2Link the private DNS zone to the virtual network VNet1.
- 3Create a private endpoint for the storage account's blob sub-resource in VNet1.
- 4Configure private DNS integration to register the private endpoint's IP address in the private DNS zone.
- 5Configure the storage account's public network access to Disabled.
Cevap
To configure secure private access to the storage account, you must first create the private DNS zone, link the zone to the virtual network, create the private endpoint, integrate it with the DNS zone to auto-register DNS records, and finally restrict the storage account's public network access.
The correct order establishes the prerequisite DNS infrastructure (creating the private DNS zone and linking it to the virtual network) before creating the private endpoint and integrating it. Finally, public access is disabled to restrict all traffic to the private network route.
Adım Adım Çözüm
Anahtar Kavram
Configuring private network access and private DNS integration for Azure Storage accounts.