Hi everyone,
I need to securely connect Microsoft Fabric Data Pipelines or Notebooks to an Azure PostgreSQL Flexible Server that is configured with Private Access (VNet Integration only).
Key Constraints & Requirements:
- No Managed Private Endpoints → Not an option because Azure PostgreSQL only supports Private Endpoints when Public Access is enabled, which I cannot allow.
- No VNet Data Gateway → I’d prefer to avoid this since Dataflows are not the primary use case.
- Would rather avoid ADF or On-Premises Gateway, but open to suggestions if no better alternatives exist.
What I’ve Considered So Far:
- Internal Load Balancer + Private DNS → Would this be a viable approach for secure connectivity?
- Azure Bastion / SSH Tunnel → Is this commonly used for Fabric Notebooks?
- Read Only Replica for PostgreSQL -> Could a replica be an option?
Question:
- What is the best Fabric-native or secure workaround to connect to Azure PostgreSQL (Private Access) without exposing it publicly?
- Are there any Microsoft-recommended patterns or Fabric-specific solutions that I might be overlooking?
Thanks in advance for your insights!