Azure SQL Managed Instance with private IP vitual nework

Question

We have a Org policy which does not allow public IP for resource creation and because of that I am not able to create SQL Managed Instance as it takes public IP in Virtual network. Is there a way to configure the virtual network with private IP for SQL Managed Instance?

below is the policy:

"properties": { "policyType": "Custom", "mode": "Indexed", "description": "Security policy we do not allow public ip addresses and user defined routes", "policyRule": { "if": { "anyOf": [ { "source": "action", "like": "Microsoft.Network/publicIPAddresses/" }, { "source": "action", "like": "Microsoft.Network/routeTables/" } ] }, "then": { "effect": "deny" } }

Answer 1

Managed instance by default gets private IP address assigned for data traffic, and you can open an additional public IP address as an opt-in feature. If you are referring to instance's management endpoint, for instance management traffic, please notice that it is necessary for managed instance to work and protected by a built-in firewall.