Private Endpoints with Azure Storage File Shares

Azure services are publicly available over the internet by default. That works for many services, but sometimes we need to limit access to internal networks only. Private Endpoints provide a local, internal connection to resources in Azure. It does this by adding a virtual NIC to a subnet. From there, the NIC gets a private IP address where it can be accessed from the internal network. This video goes over the configuration options to create a new storage account with an Azure File Share Private Endpoint as well as update an existing storage account with a private endpoint.

00:00 - Start
02:31 - Create the Storage Account
04:32 - Enable Large File Share Support
05:43 - Configure DNS
08:59 - Convert Existing File Share

Links
Zero to Hero with Azure Virtual Desktop

Hybrid Identity with Windows AD and Azure AD

Private Endpoints and DNS in Azure

[gihanw]

Good stuff man, I love the little nuggets of information you randomly include. I had a pretty good idea about private endpoints but I came here to refresh my memory and I was pleased at how you broke it down clearly. Great job. Keep it up!!👍🏻

[nepsky]

Great content. Keep up the good work with Azure Networking resources

[ronnieoverby]

Very useful info. One thing that was tripping me up was that I didn't realize that a private endpoint per sub resource type was needed (ie. blobs vs. file)

[ghaithbitar]

i like you thank you a lot from my heart for these useful Videos !!!

[subscription]

Thanks for the video. What if I don’t have the dns server because our environment is cloud only? Where should I add these dns records

[RicardoJosue]

Hi great Video, how connect to private enpoint from my local machine for execute net use... ?

[Ozzyorcborne]

Excellent video. I had a question regarding private endpoints. Can you AD domain join the azure file share using private endpoints? and if yes, should it be done before or after running the azfileshybrid commands to join the fileshare to the domain? I would like to set up ACLs on the fileshare but id rather not give it a public endpoint.

[dtroxx]

You should configure Azure privatedns using a conditional forwarder to the dc's in the hub.

[LandscapeInMotion]

Great explanation! Can the Dataverse "Synapse Link" (exports data to data lake, and creates Synapse database), access a Private Endpoint storage account so it can write to the data lake? Also, is this secure? I think all data is encrypted at rest.

[mtzaroon]

How fileshare works with function for deployment of function over a lot in this issue..