azure-private-link

Design Azure Private Endpoint DNS, security, and network configurations.

1|Updated May 1, 2026
One-click install
npx skills add https://github.com/pascalvanderheiden/energize-your-code-hackathon --skill azure-private-link-pascalvanderheiden
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-private-link
Source: https://github.com/pascalvanderheiden/energize-your-code-hackathon/tree/main/.github/skills/azure-private-link
Command: npx skills add https://github.com/pascalvanderheiden/energize-your-code-hackathon --skill azure-private-link-pascalvanderheiden

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure Private Link projects often fail or become costly due to unclear DNS resolution, security controls, quota/scale limits, and misconfigured Private Endpoint networking.

Core Features & Use Cases

  • DNS design guidance for Private Endpoints, including private DNS zones, split-horizon considerations, and common resolution pitfalls.
  • Decision and architecture help for choosing patterns like Network Security Perimeter transitions and cost-aware Private Link designs.
  • Security and configuration coverage for RBAC, Azure Firewall traffic inspection, Private Endpoint properties, monitoring, and diagnostic logs.
  • Use case examples: planning a migration to Network Security Perimeter, implementing DNS with Private Resolver, or configuring Private Endpoint properties for reliable high-scale connectivity.

Quick Start

Use the azure-private-link skill to design your Private Endpoint DNS, security, and network configuration for the specific Azure resources you want to connect.

Frequently Asked Questions about azure-private-link

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design DNS resolution for Azure Private Endpoints?

Azure Private Endpoint DNS design requires integrating private DNS zones and managing split-horizon considerations to avoid resolution pitfalls. You can configure DNS with a Private Resolver to ensure reliable connectivity for your specific Azure resources.

How do I configure Azure Firewall to inspect Private Link traffic?

Azure Firewall controls and inspects Private Link traffic by applying security rules to network traffic flowing through Private Endpoints. You can configure traffic inspection alongside RBAC and diagnostic logs to secure your connectivity.

What are the per-VNet high-scale limits and quotas for Azure Private Link?

Azure Private Link per-VNet high-scale limits and quotas dictate how many Private Endpoints you can deploy within a virtual network. You must monitor these limits during deployment to prevent hitting service availability constraints.

Do I need Network Security Perimeter for my Azure Private Link migration?

Network Security Perimeter transitions are relevant for Azure Private Link migrations when you need enhanced security boundaries beyond standard Private Endpoints. You can evaluate architecture patterns to determine if migration fits your scenario.

Why does my Private Endpoint connection fail despite correct RBAC permissions?

Private Endpoint connection failures often stem from misconfigured DNS resolution or network security settings rather than RBAC alone. You should verify private DNS zone integration and Azure Firewall rules to isolate the connectivity issue.

What's the best way to secure Azure Private Link connectivity across VNets?

Securing Azure Private Link connectivity across VNets involves combining Private Endpoints, private DNS zones, and Azure Firewall traffic inspection. You can apply RBAC controls and monitoring to maintain a reliable high-scale network architecture.