Hotspot Question You have an Azure subscription that contains the resources shown in the following table. You need to automate the creation of private endpoints for Vaul1 by using an Azure Resource…

Question

Exhibit

Answer Area

• privateLinkServiceId parameterResourceId
  DeployerObjectKeysParametersResourceId
• subnet virtual network nameVNET1
  Privatelink.vaultcore.azure.netSubnet1Vault1VNET1

Explanation

This question tests knowledge of ARM template syntax for creating private endpoints for Azure Key Vault, specifically the resource type, API version, and property configuration required.

Approach. To create a private endpoint for an Azure Key Vault using an ARM template, you must use the resource type 'Microsoft.Network/privateEndpoints' with an appropriate API version such as '2021-02-01' or later. The template requires a 'privateLinkServiceConnections' property that references the Key Vault resource ID, and the 'groupIds' property must be set to ['vault'] to specify the Key Vault sub-resource. The 'subnet' property must reference the subnet in which the private endpoint will be deployed, using the subnet's resource ID. The private DNS zone group configuration (Microsoft.Network/privateEndpoints/privateDnsZoneGroups) is also typically included to integrate with Azure Private DNS for name resolution of 'privatelink.vaultcore.azure.net'.

Concept tested. ARM template structure for Azure Private Endpoints, specifically the resource type 'Microsoft.Network/privateEndpoints', correct groupIds for Key Vault ('vault'), privateLinkServiceConnections configuration, subnet reference, and optional private DNS zone group integration for Key Vault private endpoint resolution.

Reference. https://docs.microsoft.com/en-us/azure/private-link/create-private-endpoint-template

No community discussion yet for this question.