Design Private Access to Managed Data with DNS as a Dependency
Private access to a managed database depends on DNS returning the private endpoint address, not just on a private network path. This interactive lesson compares provider private connectivity patterns and orders the checks that verify private access. Covers: Split-horizon DNS, private DNS zone linking, public endpoint fallback, AWS PrivateLink, Azure Private Link, Private Service Connect. Practice: Private access verification. Prerequisites: DNS resolution and private subnets.
We'll cover the following...
The storefront app tier runs in private subnets and must reach its managed database without exposing a public database endpoint. In an interview, we must defend whether access uses a public endpoint with restrictions, a private endpoint, or a service-specific private connectivity feature. For this workload, public reachability is not acceptable. The design must also remain simple to trace when a connection fails. ...