What should you do first?

You have an Azure virtual network named Vnet1 that has one subnet. Vnet1 is in the West Europe Azure region.

You deploy an Azure App Service app named App1 to the West Europe region.

You need to provide App1 with access to the resources in Vnet1. The solution must minimize costs.

What should you do first?

A. Create a private link.

B. Create a new subnet.

C. Create a NAT gateway.

D. Create a gateway subnet and deploy a virtual network gateway.

View Answer

Answer: B

Explanation:

To provide an Azure App Service app with access to the resources in an Azure virtual network, while minimizing costs, the first step you should take is:

B. Create a new subnet.

Here’s why this is the best option among the given choices:

A. Create a private link: Azure Private Link is a service that enables you to access Azure service resources securely from a virtual network. While it is a valid way to provide secure access, it is not necessarily the most cost-effective option, especially if you just need to integrate with Azure App Service.

B. Create a new subnet: Azure App Service can integrate with an Azure virtual network by using a feature called VNet Integration. To set up VNet Integration, you need to have a dedicated subnet within your Azure VNet where the app will be injected. This is usually the most cost-effective option because it doesn’t require the creation of additional resources like a NAT gateway or virtual network gateway.

C. Create a NAT gateway: A NAT gateway is used to provide outbound connectivity for virtual machines in your virtual network. It’s not required for enabling access to an App Service.

D. Create a gateway subnet and deploy a virtual network gateway: This is typically used for cross-premises connectivity, such as connecting an Azure VNet to an on-premises network. It is a more expensive option compared to VNet Integration and is not necessary if you are only connecting App Service to a VNet.

Therefore, the first step you should take to provide App1 with access to the resources in Vnet1 is to create a new subnet for VNet Integration with Azure App Service, which is the most cost-effective solution that aligns with the requirement.