azure - ARM 模板 - 存储帐户 - 将专用终结点添加到现有存储帐户

Question

这是一种关于 ARM 模板的新手问题。

我正在尝试将专用终结点添加到现有 ADLS v2 存储帐户。

问题是我没有现有代码，如果我导出模板，我可能会错过一些东西，例如网络和防火墙信息。

有关如何使用 ARM 模板将专用终结点添加到现有存储帐户的任何建议？

谢谢。

Answer 1

我在我的环境中进行了尝试并得到了以下结果:

Add a private endpoint to an existing storage account using an ARM template?

是的，您可以使用 ARM 模板为 Azure ADLS 帐户创建专用端点。

模板:

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "privateEndpoints_venkat345_name": {
            "defaultValue": "venkat345",
            "type": "String"
        },
        "storageAccounts_venkat326_externalid": {
            "defaultValue": "/subscriptions/xxxxxx/resourceGroups/v-venkat-rg/providers/Microsoft.Storage/storageAccounts/venkat326",
            "type": "String"
        },
        "virtualNetworks_imr_externalid": {
            "defaultValue": "/subscriptions/xxxxx/resourceGroups/v-venkat-rg/providers/Microsoft.Network/virtualNetworks/venkat",
            "type": "String"
        },
        "privateDnsZones_privatelink_blob_core_windows_net_externalid": {
            "defaultValue": "/subscriptions/xxxxxxxxxxx/resourceGroups/v-venkat-rg/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net",
            "type": "String"
        }
    },
    "variables": {},
    "resources": [
        {
            "type": "Microsoft.Network/privateEndpoints",
            "apiVersion": "2022-05-01",
            "name": "[parameters('privateEndpoints_venkat345_name')]",
            "location": "eastus",
            "tags": {
                "Reason": "Repro",
                "CreatedDate": "1/24/2023 4:31:05 AM",
                "CreatedBy": "NA",
                "OwningTeam": "NA"
            },
            "properties": {
                "privateLinkServiceConnections": [
                    {
                        "name": "[parameters('privateEndpoints_venkat345_name')]",
                        "id": "[concat(resourceId('Microsoft.Network/privateEndpoints', parameters('privateEndpoints_venkat345_name')), concat('/privateLinkServiceConnections/', parameters('privateEndpoints_venkat345_name')))]",
                        "properties": {
                            "privateLinkServiceId": "[parameters('storageAccounts_venkat326_externalid')]",
                            "groupIds": [
                                "blob"
                            ],
                            "privateLinkServiceConnectionState": {
                                "status": "Approved",
                                "description": "Auto-Approved",
                                "actionsRequired": "None"
                            }
                        }
                    }
                ],
                "manualPrivateLinkServiceConnections": [],
                "customNetworkInterfaceName": "[concat(parameters('privateEndpoints_venkat345_name'), '-nic')]",
                "subnet": {
                    "id": "[concat(parameters('virtualNetworks_venkat_externalid'), '/subnets/default')]"
                },
                "ipConfigurations": [],
                "customDnsConfigs": []
            }
        },
        {
            "type": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups",
            "apiVersion": "2022-05-01",
            "name": "[concat(parameters('privateEndpoints_venkat345_name'), '/default')]",
            "dependsOn": [
                "[resourceId('Microsoft.Network/privateEndpoints', parameters('privateEndpoints_venkat345_name'))]"
            ],
            "properties": {
                "privateDnsZoneConfigs": [
                    {
                        "name": "privatelink-blob-core-windows-net",
                        "properties": {
                            "privateDnsZoneId": "[parameters('privateDnsZones_privatelink_blob_core_windows_net_externalid')]"
                        }
                    }
                ]
            }
        }
    ]
}
 

您可以使用自定义模板部署通过门户来部署模板。

门户 -> 模板部署 -> 自定义部署 -> 构建您自己的部署。

门户:

以上模板部署成功，并反射(reflect)在资源组和 ADLS 存储帐户中。

引用: Use private endpoints - Azure Storage | Microsoft Learn