Skip to content
cccskills
FreePublished on GitHub

azure-private-link

Expert knowledge for Azure Private Link development including best practices, decision making, architecture & design patterns, limits & quotas, security, and configuration. Use when configuring Private Endpoints, DNS zones, NSGs/NSPs, Azure Firewall traffic inspection, or Private Resolver, and other Azure Private Link related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Virtual WAN (use azure-virtual-wan), Azure ExpressRoute (use azure-expressroute).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills
Works withAzureTerraform
See how to install

Files included (1)

  • SKILL.md7.9 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure Private Link Skill

This skill provides expert guidance for Azure Private Link. Covers best practices, decision making, architecture & design patterns, limits & quotas, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
Best PracticesL34-L38DNS design and configuration guidance for private endpoints, including zone setup, name resolution patterns, split-horizon DNS, and avoiding common DNS misconfigurations with Private Link
Decision MakingL39-L44Guidance on choosing perimeter access modes and designing Azure Private Link setups, focusing on security tradeoffs, cost optimization, and migration/transition considerations.
Architecture & Design PatternsL45-L49Designing DNS architectures for Private Endpoints using Azure Private Resolver, including name resolution patterns, forwarding rules, and integration with on-premises or hybrid networks
Limits & QuotasL50-L56Limits, quotas, and behaviors for Private Link/Endpoints, how to check service availability per resource, and how to request increases to VNet Private Endpoint limits.
SecurityL57-L64RBAC setup for Private Link and Network Security Perimeters, security best practices, and inspecting/controlling Private Endpoint traffic with Azure Firewall.
ConfigurationL65-L85Configuring Azure Private Link, endpoints, DNS, NSPs, policies, monitoring, and IPv4/IPv6 connectivity using portal, CLI, PowerShell, and Terraform.

Best Practices

TopicURL
Apply DNS integration best practices for Azure Private Endpointshttps://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns-integration

Decision Making

TopicURL
Choose and transition Azure network security perimeter access modeshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-transition
Optimize Azure Private Link design for cost and securityhttps://learn.microsoft.com/en-us/azure/private-link/private-link-cost-optimization

Architecture & Design Patterns

TopicURL
Design DNS infrastructure for Private Endpoints with Azure Private Resolverhttps://learn.microsoft.com/en-us/azure/private-link/tutorial-dns-on-premises-private-resolver

Limits & Quotas

TopicURL
Check Azure Private Link service availability by resourcehttps://learn.microsoft.com/en-us/azure/private-link/availability
Increase Azure Private Endpoint VNet limitshttps://learn.microsoft.com/en-us/azure/private-link/increase-private-endpoint-vnet-limits
Azure Private Link limits, behaviors, and FAQshttps://learn.microsoft.com/en-us/azure/private-link/private-link-faq

Security

TopicURL
Configure RBAC permissions for Azure Network Security Perimeter operationshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-role-based-access-control-requirements
Configure RBAC permissions for Azure Private Linkhttps://learn.microsoft.com/en-us/azure/private-link/rbac-permissions
Apply security best practices to Azure Private Linkhttps://learn.microsoft.com/en-us/azure/private-link/secure-private-link
Inspect and control Private Endpoint traffic using Azure Firewallhttps://learn.microsoft.com/en-us/azure/private-link/tutorial-inspect-traffic-azure-firewall

Configuration

TopicURL
Configure service tag access in Azure Network Security Perimeterhttps://learn.microsoft.com/en-us/azure/private-link/configure-network-security-perimeter-service-tag
Configure cross-perimeter links for Azure NSPshttps://learn.microsoft.com/en-us/azure/private-link/configure-perimeter-link
Configure Azure Private Link service Direct Connecthttps://learn.microsoft.com/en-us/azure/private-link/configure-private-link-service-direct-connect
Configure standard service endpoints using Azure CLIhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-cli
Configure standard service endpoints in Azure portalhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-portal
Configure standard service endpoints with PowerShellhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-powershell
Configure Azure Private Link service endpoint with Terraformhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-terraform
Create and manage network security perimeters with Azure CLIhttps://learn.microsoft.com/en-us/azure/private-link/create-network-security-perimeter-cli
Create and manage a network security perimeter in portalhttps://learn.microsoft.com/en-us/azure/private-link/create-network-security-perimeter-portal
Configure subnet network policies for private endpointshttps://learn.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network-policy
Configure privateLinkServiceNetworkPolicies for Private Linkhttps://learn.microsoft.com/en-us/azure/private-link/disable-private-link-service-network-policy
Configure and manage Azure Private Endpoint propertieshttps://learn.microsoft.com/en-us/azure/private-link/manage-private-endpoint
Reference for Azure Private Link monitoring datahttps://learn.microsoft.com/en-us/azure/private-link/monitor-private-link-reference
Enable and store Network Security Perimeter diagnostic logshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-diagnostic-logs
Configure and use Azure Network Security Perimeter metricshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-metrics
Configure DNS zones for Azure Private Endpointshttps://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns
Configure SNAT bypass tags for Private Endpoint traffic via NVAhttps://learn.microsoft.com/en-us/azure/private-link/private-link-disable-snat
Configure Azure Private Link over IPv6 connectivityhttps://learn.microsoft.com/en-us/azure/private-link/private-link-ipv6

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

azure-active-directory-b2c

Free

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

azure-advisor

Free

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Advisor alerts, digests, recommendation states, Resource Graph queries, or RBAC access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

azure-ai-vision

Free

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

azure-aks-edge-essentials

Free

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

azure-analysis-services

Free

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

azure-anyscale-on-azure

Free

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when registering AKS as Anyscale clouds, wiring ACR images, enabling Private Link/RBAC, ARM-based deployments, or region checks, and other Azure Anyscale On Azure related development tasks. Not for Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Machine Learning (use azure-machine-learning), Azure HDInsight (use azure-hdinsight).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

See all skills by MicrosoftDocs

Report a problem with this skill