Question

Your team provisions an Azure Machine Learning workspace configured with a managed virtual network in allow-only-approved-outbound mode. Training jobs on a compute cluster fail because they cannot reach a third-party Python package index at 'pkgs.contoso-partner.com' over HTTPS to install dependencies. You must enable this specific outbound connection while keeping the network locked down. What should you do?

Accepted Answer

Add an FQDN outbound rule for 'pkgs.contoso-partner.com' to the workspace managed virtual network configuration.

Answer

Switch the managed virtual network to allow-internet-outbound mode so the compute can reach the package index.

Answer

Create a private endpoint from the workspace to 'pkgs.contoso-partner.com'.

Answer

Add an inbound service tag rule to the network security group on the compute cluster subnet.