Generally Available: Standard service endpoint

Standard service endpoint, a new capability in the Azure Private Link family, provides a scalable and secure approach for connecting Azure IaaS workloads to Azure PaaS services. Standard service endpoint addresses the manageability, and the scale limitations of traditional service endpoints by using Public IP addresses as network identifiers and integrating with network security perimeter. This enables organizations to achieve large-scale IaaS-to-PaaS connectivity while maintaining strong network access controls and simplified operations.

With standard service endpoint, customers can associate a public IP instance with multiple subnets and virtual networks across subscriptions within the same tenant and region. When combined with network security perimeter, organizations can create a logical security boundary around supported Azure services, including Azure Storage, Azure SQL Database, Azure Cosmos DB, and Azure Key Vault. Access can then be restricted so that only approved networks and workloads are allowed to communicate with these resources, helping reduce operational complexity while strengthening security posture.

Standard service endpoint is a paid Azure feature and is billed at a fixed rate per virtual network (VNet) per hour.

Learn more:

• Documentation
• Azure Private Link pricing