Skip to main content

2 - Secure: managed VNet, internet outbound

Workspace managed virtual network (AllowInternetOutbound), private endpoints and public access disabled.

Idmanaged-vnet-internet
Networkmanaged VNet, internet outbound
Servingonline
AddsPrivate endpoints, public access disabled
IaC and CI/CDTerraform or Bicep; GitHub or Azure DevOps

Public network access is disabled on the workspace and its dependencies. Outbound traffic from jobs goes to the internet through the managed network.

Use it

New-MLOpsInputFile -Scenario managed-vnet-internet -Path inputs.yaml -Iac terraform -Cicd github
Note

Pipelines that touch the workspace need self-hosted agents or runners with network access to it.

See the cost estimates and the prerequisites.

Microsoft documentation