When you create a Private Link service, Azure gives it a read-only name that is unique worldwide. The provider passes this to consumers, who use it, or the resource ID, to request a private endpoint connection.
Also called alias.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Private Link service alias in context, with comparison tables and the common traps.
Terms in this definition
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- NAT IP configuration
In a Private Link service, consumer traffic is source-NATed to these provider VNet addresses. Up to eight can be added for scale, as each supplies about 64,000 TCP ports per backend VM.
- Provider
The organisation that shares data in OpenSharing. Recipients also see a provider as a Unity Catalog securable, from which shares can be mounted as catalogs.
- Resource ID
The unique path that identifies an Azure resource, shaped like /subscriptions/.../resourceGroups/.../providers/.... Moving the resource to a different resource group or subscription gives it a new ID.
- Private endpoint connection
Kept on the target resource, this record tracks a private endpoint's approval state: Pending, Approved, Rejected or Disconnected. Requests from someone without permission on the resource (another tenant, say) wait as Pending for the owner's approval.
Related terms
- Apex domain
The bare domain without any subdomain (example.com), also known as the zone apex or root domain. Since a CNAME is not allowed there, routing it to a service like Front Door relies on CNAME flattening or Azure DNS alias records.
- DNAME
A DNS record that points an entire branch of the namespace at a different domain, whereas a CNAME only gives a single name an alias.
- Subscription alias
Microsoft.Subscription/aliases: deploying one at tenant level against a billing scope makes a brand-new subscription. Existing subscriptions can't be changed this way. Subscription vending modules call this method alias mode.