Outlined below are detailed of how the Azure Commercial Marketplace can be used to support the private connectivity pattern.
Partner center provides access to the Azure Commercial Marketplace where offers can be created and published. Details of how to access Partner Center, sign up and create an account are detailed in the Partner Center documentation Partner Center.
Once an offer has been created the key elements for the Private Connectivity Pattern are within the plan setup.
Contains overview of the individual plan.
Key section here for validation purposes is whether the plan visibility is public or private. With private visibility Azure subscription IDs can be added to limit the visibility of the Marketplace entry to target subscriptions only.
The technical configuration provides the package details.
| Field | Comment |
|---|---|
| Package file | zip file of the Managed Application customUIdefinition.json and the mainTemplate.json |
| Deployment Mode | Ensure "Incremental" is selected |
| Notification Endpoint URL | Enter the webhook notification endpoint without /resource as this will be added by the Marketplace notification service eg (https://functionapp.azurewebsites.net/api) |
| Customize Allowed Customer actions | select (see below for details) |
| Microsoft Entra tenant ID | Enter the Publisher tenant id |
| Authorizations | Enter the principal Id of the function app identity and any User/Group required to access the Managed Application |
To enable Private connectivity add the following actions that will allow VNet peering:
- Microsoft.Network/virtualNetworks/virtualNetworkPeerings/write
- Microsoft.Network/virtualNetworks/virtualNetworkPeerings/delete
- Microsoft.Network/virtualNetworks/peer/action
- Microsoft.Network/privateDnsZones/virtualNetworkLinks/write
- Microsoft.Network/privateDnsZones/virtualNetworkLinks/delete
- Microsoft.Network/virtualNetworks/join/action