Standard service endpoint, a
new capability in the Azure Private Link family, provides a scalable and secure
approach for connecting Azure IaaS workloads to Azure PaaS services. Standard service
endpoint addresses the manageability, and the scale limitations of traditional
service endpoints by using Public IP addresses as network identifiers and
integrating with network security perimeter. This enables organizations to
achieve large-scale IaaS-to-PaaS connectivity while maintaining strong network
access controls and simplified operations.
With standard service endpoint,
customers can associate a public IP instance with multiple subnets and virtual
networks across subscriptions within the same tenant and region. When combined
with network security perimeter, organizations can create a logical security
boundary around supported Azure services, including Azure Storage, Azure SQL
Database, Azure Cosmos DB, and Azure Key Vault. Access can then be restricted
so that only approved networks and workloads are allowed to communicate with
these resources, helping reduce operational complexity while strengthening
security posture.
Standard service endpoint is a
paid Azure feature and is billed at a fixed rate per virtual network (VNet) per
hour.
Learn more: