Managed Private Endpoint - Synapse to Azure SQL Managed Instance

Josh Ashwood 91 Reputation points
2024-07-17T23:20:21.6866667+00:00

Does Synapse Analytics support creating a private endpoint to Managed Instance?

We only see Azure SQL here, not Managed Instance

https://video2.skills-academy.com/en-us/azure/synapse-analytics/security/how-to-create-managed-private-endpoints

How could we connect a Synapse notebook to a Managed Instance with public network access disabled?

User's image

Azure Synapse Analytics
Azure Synapse Analytics
An Azure analytics service that brings together data integration, enterprise data warehousing, and big data analytics. Previously known as Azure SQL Data Warehouse.
4,807 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vinodh247 16,116 Reputation points
    2024-07-18T00:53:55.5866667+00:00

    Hi Josh Ashwood,

    Thanks for reaching out to Microsoft Q&A.

    I don't see any official docs mentioned about this, but I believe you can achieve this. You might need to configure a private endpoint for the Managed Instance and ensure that the synapse workspace is correctly set up to access resources within the same VNet or a peered VNet.

    Try the following steps and let me know

    After creating private endpoint for your managed Instance...

    • configure your custom DNS solution to resolve the private endpoint's FQDN to the private IP address
    • Ensure that your Synapse workspace is deployed within the same VNet or a peered VNet where the Managed Instance's private endpoint exists. Configure the Synapse workspace to use the managed private endpoint for communication with the Managed Instance
    • In your Synapse workspace, navigate to the "Manage" hub --> security -->select "Managed private endpoints."
    • Click on New to create a new managed private endpoint. Follow the wizard to specify the target resource (Managed Instance)

    Now use the appropriate connection string in your Synapse notebook, ensuring that the connection string targets the private endpoint's fqdn.

    Note: Make sure that the network security groups (NSGs) and firewall rules allow the necessary traffic between Synapse and the Managed Instance.

    Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.


1 additional answer

Sort by: Most helpful
  1. Josh Ashwood 91 Reputation points
    2024-07-18T01:16:50.2633333+00:00

    Sorry I think the documentation is just out of date! I spun up a new Synapse workspace and Managed instance is in the list...

    On the left is the screenshot from https://video2.skills-academy.com/en-us/azure/synapse-analytics/security/how-to-create-managed-private-endpoints

    On the right is the real world
    User's image

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.