thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Service Endpoint

Azure VNet feature that extends a subnet's identity to Azure PaaS services over the Azure backbone so services can restrict access to that subnet.

Definition

With service endpoints, traffic from a subnet to services such as Azure Storage and Azure SQL uses optimal routes over the backbone, and the service's firewall can allow only selected subnets. The service still uses its public endpoint, and access from on-premises is not covered.

Example

A storage account's firewall allows only the app subnet, which has the Microsoft.Storage service endpoint enabled.

Exam tip

Choose private endpoints when the service must have a private IP or be reachable from on-premises; service endpoints are simpler and free.

Related terms