Azure Private Endpoint ARM Template Ready-to-Deploy Reusable Solution
Azure Private Endpoint ARM Template Ready-to-Deploy Reusable Solution
Overview
This repository provides a reusable ARM template and parameter file for deploying an Azure Private Endpoint. It enables secure connectivity between a virtual network and an Azure PaaS resource using Private Link.
What This Template Deploys
Azure Private Endpoint
Network interface with automatically assigned private IP
Private Link connection to a target Azure service
Optional Private DNS Zone Group if configured
The template supports both automatic approval and manual approval scenarios, depending on the target service configuration.
Files Included
template.json defines the Private Endpoint resource and optional DNS configuration
parameters.json contains environment-specific input values
deploy.ps1 executes the deployment
Required Inputs
privateEndpointName
Name of the Private Endpoint resource
virtualNetworkName
Name of the existing virtual network
subnetName
Name of the existing subnet
privateLinkServiceId
Full Azure resource ID of the target service
Example
/subscriptions/<sub-id>/resourceGroups/<rg>/providers/Microsoft.Storage/storageAccounts/<name>
groupIds
Subresource type for the target service
Examples
Blob for Storage
sqlServer for SQL
vault for Key Vault
sites for App Service
Optional Inputs
manualApproval
Set to true if the connection requires approval
privateDnsZoneId
Private DNS Zone resource ID if DNS integration is required
tags
Key-value pairs applied to the resource
Requirements
A virtual network must already exist in the target resource group
A subnet must exist within the virtual network
The subnet must allow Private Endpoint deployment and have network policies disabled
The target Azure resource must already exist
The target resource must support Private Link
The provided resource ID must be valid and complete
The groupIds value must match the target service type
Summary
This template provides a production-ready and reusable deployment for Azure Private Endpoint. Successful deployment depends on correct parameter values and proper configuration of all required existing resources and dependencies.
Support
For questions or custom template requests, please contact:
ITCloudAcademy Support Team
Email: support@ITCloudAcademy.net
Email: info@ITCloudAcademy.net
Website: http://www.itcloudacademy.net
Support Hours:
Monday to Friday
9:00 AM to 6:00 PM MST
