Connect to Azure Synapse Studio using Azure Private Link Hubs

  • Article

This article explains how Azure Synapse Analytics Private Link Hubs private links are used to securely connect to Synapse Studio.

You can securely connect to Azure Synapse Studio from your Azure virtual network using private links. Azure Synapse Analytics private link hubs are Azure resources which act as connectors between your secured network and the Synapse Studio web experience.

There are two steps to connect to Synapse Studio using private links. First, you must create a private link hubs resource. Second, you must create a private endpoint from your Azure virtual network to this private link hub. You can then use private endpoints to securely communicate with Synapse Studio. You must integrate the private endpoints with your DNS solution, either your on-premises solution or Azure Private DNS.

You can use a single Azure Synapse private link hub resource to privately connect to all your Azure Synapse Analytics workspaces using Azure Synapse Studio. The workspaces do not have to be in the same region as the Azure Synapse Private link hub. The Azure Synapse Private link hub resource can also be used for connections to Synapse workspaces in different subscriptions or Microsoft Entra tenants.

Note

Private link hubs are intended for securely loading the static content Synapse Studio over private links. You must create separate, private endpoints to the resources you wish to connect to within the workspace, such as provisioned/dedicated SQL pools, or Spark pools.

You must connect your Azure virtual network to the Synapse private link hub resource to secure the end-to-end connection to Synapse Studio. For this, you must create a private endpoint from your virtual network to the private link hub you created. You can use the Azure portal for your private link hub and go to the Private endpoint section. Select "+ Private endpoint" to create a new private endpoint that connects to your private link hub.

Screenshot that shows the private endpoint connections page.

Make sure to choose the "Microsoft.Synapse/privateLinkHubs" Resource type on the "Resource" tab.

Screenshot that shows the 'Create a private endpoint' page with 'Resource type' highlighted.

On "Configuration" tab, select "privatelink.azuresynapse.azure.cn" for Private DNS Zones when integrating with your virtual network and private DNS zone.

Create a private endpoint to private link hub

Next steps

Learn more about Managed workspace Virtual Network

Learn more about Managed private endpoints

Create Managed private endpoints to your data sources

Connect to Synapse workspace using private endpoints