2 - Secure: managed VNet, internet outbound
Workspace managed virtual network (AllowInternetOutbound), private endpoints and public access disabled.
| Id | managed-vnet-internet |
| Network | managed VNet, internet outbound |
| Serving | online |
| Adds | Private endpoints, public access disabled |
| IaC and CI/CD | Terraform or Bicep; GitHub or Azure DevOps |
Public network access is disabled on the workspace and its dependencies. Outbound traffic from jobs goes to the internet through the managed network.
Use it
Note
Pipelines that touch the workspace need self-hosted agents or runners with network access to it.
See the cost estimates and the prerequisites.