Skip to content

Latest commit

 

History

History
35 lines (18 loc) · 1.03 KB

Challenge-7.md

File metadata and controls

35 lines (18 loc) · 1.03 KB
Raw

Challenge 7 - Azure Private Link

< Previous Challenge - Home - Next Challenge>


Introduction

In this challenge, you will learn how to enable secure private access to Azure Services.


Description

Contoso uses Azure Storage as part of their architecture. However, public access to the service is not acceptable as part of their compliance requirement. The security team also has data exfiltration concerns that need to be addressed.

For this challenge:

  • Restrict public access to the Storage service.

Success Criteria

  • The servers in the Payments and Finance networks should be able to access the storage service successfully.

  • The entire communication from the server to the storage service should be private.

  • The DNS resolution for the storage service should resolve to a private IP.


Learning Resources

Azure Private Link