Private Link
Private access to services hosted on the Azure platform, keeping your data on the Microsoft network.
OVERVIEW
Connect and deliver services privately on Azure
Azure Private Link provides private connectivity from a virtual network to Azure platform as a service (PaaS), customer-owned, or Microsoft partner services. It simplifies the network architecture and secures the connection between endpoints in Azure by eliminating data exposure to the public internet.
- Use Private Link to bring services delivered on Azure into your private virtual network by mapping it to a private endpoint. Or privately deliver your own services in your customers’ virtual networks. All traffic to the service can be routed through the private endpoint, so no gateways, NAT devices, ExpressRoute or VPN connections, or public IP addresses are needed. Private Link keeps traffic on the Microsoft global network.
- Private Link carries traffic privately—your data isn’t on the internet. Service is mapped to Azure virtual networks through a private endpoint, which reduces your exposure to threats and helps you meet compliance standards.
- Connect privately to services running in other Azure regions. Private Link is global and has no regional restrictions.
- Use Private Link to map private endpoints to Azure PaaS resources. In the event of a security incident within your network, only the mapped resource would be accessible, eliminating the threat of data exfiltration.
- Access private endpoints over private peering or VPN tunnels from on-premises or peered virtual networks. Microsoft hosts the traffic, so you don’t need to set up public peering or use the internet to migrate your workloads to the cloud.
- Privately consume Azure PaaS, Microsoft partner, and your own services in your virtual networks on Azure. Private Link works across Microsoft Entra ID (formerly Azure Active Directory) tenants to help unify your experience across services. Send, approve, or reject requests directly, without permissions or role-based access controls.
Features
Explore Event Hub
Private connectivity
Private connectivity to services on Azure—traffic remains on the Microsoft network, with no public internet access
Integration
Integration with on-premises and peered networks
Data protection
Protection against data exfiltration for Azure resources
Direct delivery
Services delivered directly to your customers’ virtual networks
Security
Embedded security and compliance
34,000
Full-time equivalent engineers dedicated to security initiatives at Microsoft.
15,000
Partners with specialized security expertise.
>100
Compliance certifications, including over 50 specific to global regions and countries.
Pricing
Private Link offers simplified pricing
Pay only for private endpoint resource hours and the data processed through your private endpoint.
Frequently asked questions about Private Link
- See the availability by regions page.
- We guarantee that Private Link will be available at least 99.99% of the time. To learn more, please visit the SLA page.
- Support is available through the Azure portal.
- Standard pricing will occur for Private Link, independent of charges for ExpressRoute or VPN gateway.
Next steps
Get started with an Azure free account
Pay as you go or try Azure free for up to 30 days.
Azure Solutions
Learn about more Azure cloud solutions
Solve your business problems with proven combinations of Azure cloud services, as well as sample architectures and documentation.
Business Solutions Hub
Find the right Microsoft Cloud solution
Browse the Microsoft Business Solutions Hub to find the products and solutions that can help your organization reach its goals.
Get the Azure mobile app 
