Securing AVD with private endpoints
In this section, we will learn how to further secure the AVD environment. By default, AVD components such as host pools and workspaces are deployed with public access. With the help of private endpoints, it’s possible to restrict public access, but it works differently for both components. Let’s first look at host pools and their options.
Host pool private endpoints
The IT admin can choose how to make the host pool(s) private. The options are as follows:
- Enable public access from all networks
- Enable public access for end users, use private access for session hosts
- Disable public access and use private access
Go to the Azure portal and the AVD portal and select the host pool to configure for private access. On the Networking tab, the IT admin can select the preferred option. Note that these private endpoints can also be configured from Private Link Center. Private Link Center is where you can manage all private...