Question

Contoso hosts a SQL Managed Instance analytics platform and exposes it through an Azure Private Link service. A partner company, Fabrikam, wants to create a private endpoint that connects to Contoso's service using the shared alias. Contoso's security team requires that they explicitly review and authorize each incoming connection before any traffic is allowed. When Fabrikam creates the private endpoint, which connection state will the endpoint initially be in, and what must Contoso do to enable connectivity?

Accepted Answer

The endpoint enters a 'Pending' state; Contoso must approve the connection from the Private Link service's connections list before traffic flows.

Answer

The endpoint enters an 'Approved' state automatically; Contoso only needs to add Fabrikam's subscription to the auto-approval list afterward.

Answer

The endpoint enters a 'Disconnected' state; Contoso must recreate the Private Link service with visibility set to the Fabrikam subscription.

Answer

The endpoint enters a 'Rejected' state; Fabrikam must resubmit the request with a valid resource ID instead of the alias.