4 - Secure: bring-your-own VNet
Spoke VNet, subnets, private DNS zones and private endpoints for all workspace dependencies.
| Id | byo-vnet |
| Network | your VNet (created) |
| Serving | online |
| Adds | Spoke VNet, subnets, private DNS zones, private endpoints (vnet_address_space) |
| IaC and CI/CD | Terraform or Bicep; GitHub or Azure DevOps |
You own the network. The accelerator creates a spoke VNet, subnets, private DNS zones and private endpoints. It creates no network security groups on the subnets, so add them to match your standards.
Use it
Inputs to review
vnet_address_space: see Options
Note
Pipelines that touch the workspace need self-hosted agents or runners with network access to it.
See the cost estimates and the prerequisites.