You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1. You plan to add a private endpoint to Subnet. You need to ensure that you can route…

While enabling network policy is relevant to how NSGs and UDRs are applied, subnet delegation is often a prerequisite for enforcing these policies effectively with private endpoints.

To properly apply network policies such as Network Security Groups (NSGs) or User-Defined Routes (UDRs) to private endpoint traffic within a subnet, the subnet must be delegated. Specifically, for Azure Private Link, subnet delegation ensures that network policies can be enforced on traffic flowing to and from the private endpoint, allowing UDRs to route traffic to the Private Link service.

Creating a service endpoint provides direct access to Azure services over the Azure backbone, but private endpoints use Azure Private Link and are a distinct connectivity model.

Provisioning a Standard Azure load balancer is unrelated to enabling Private Link routing with UDRs for a private endpoint.