- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Cloud

Deploy a Secure Web App Using NSGs and Private Endpoints
You are a cloud engineer at Globomantics tasked with securing platform services so they are reachable only over private networks. In this lab, you’ll integrate Azure PaaS services with Private Link, validate access from a workload VM, and enforce segmentation with a network security group (NSG). By the end, you’ll understand how to expose business apps privately, minimize public surface area, and verify that network policy does what you intend.

Lab Info
Table of Contents
-
Challenge
Deploy App Service with Private Link
Create an app service and add a Private Endpoint into the designated Private Link subnet. Ensure name resolution supports the private endpoint
-
Challenge
Deploy Storage Account with Private Link
Provision the storage service and enable a Private Endpoint in the Private Link subnet; align access policies to prefer private connectivity and validate name resolution to the private address.
-
Challenge
Validate Private Connectivity from the Virtual Machine
From the existing VM in the workload subnet, test connectivity to the App Service and storage account using tools like cURL and Azure CLI to verify responses without relying on public endpoints.
-
Challenge
Enforce Network Restrictions with an NSG and Re-test
Add rules to the virtual machines network security group that will restrict the VM’s access to the Storage service while allowing the App Service, and re-run tests to confirm storage access is blocked and app access remains.
About the author
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.