Secure your Tiger Cloud services with Azure Private Link

Create a Private Link subscription authorization

1. In Tiger Console, select Security > Private Endpoints > Configure Private Endpoint Connection.

2. Enter your Azure subscription ID and specify a name for the Private Link authorization, then click a checkmark next to it.

   

   Expand image

3. Under Alias, copy the alias for the region in which you need to create the connection.

   Choose the region closest to your Azure resources for optimal performance.

4. Click Done.

   Tiger Cloud confirms your authorization. Once it is confirmed, you can create multiple private endpoints from the same authorized subscription.

   

   Expand image

Create a private endpoint

1. In Azure Portal, go to Private endpoints and click Create.

   

   Expand image

2. Configure the endpoint:

   1. In Subscription, select the subscription you have previously authorized in Tiger Cloud.
   2. In Resource group, select an existing resource group or create a new one for your private endpoint.
   3. Provide a name for your endpoint.
   4. Select the region where your Virtual Network is deployed, then click Next: Resource.
   5. In Connection method, select Connect to an Azure resource by resource ID or alias.
   6. In Resource ID or alias, paste the alias you have copied from Tiger Console.
   7. In Request message, enter your Tiger Cloud project ID, then click Next: Virtual Network.
   8. Select the Virtual Network and subnet for your endpoint, optionally select an application security group, then click Next: DNS.
   9. Optionally configure private DNS integration and tags for your endpoint, then click Next: Review + create.
   10. Review your config and click Create. Azure creates your private endpoint. Wait for the deployment to succeed.
   11. Go to Private endpoints and copy the private endpoint IP from the Private IP column.

Sync the connection

1. In Tiger Console > Security > Private Link, click Refresh. Tiger Cloud automatically approves connections from authorized subscriptions. Your connection appears in the list.

   

   Expand image

2. Click Add IP and paste the IP address you have copied from Azure Portal.

3. Click the three dots next to your connection and select + Attach service. Select your service from the dropdown and click Attach. You can attach a service to one Private Endpoint connection.

   

   Important

   After attaching a service to a Private Endpoint, it is no longer accessible from the public internet. Make sure all your applications are configured to connect through the Private Endpoint before attaching your service.

4. From a VM inside your Azure VNet, connect to your service using a connection string with your connection details. You should be able to connect successfully.