Skip to content

[Hubs] Document how to move from private to public access and remove costly resources#1787

Merged
arthurclares merged 5 commits into
devfrom
copilot/fix-1342
Aug 7, 2025
Merged

[Hubs] Document how to move from private to public access and remove costly resources#1787
arthurclares merged 5 commits into
devfrom
copilot/fix-1342

Conversation

Copilot AI commented Aug 1, 2025

Copy link
Copy Markdown
Contributor

This PR adds comprehensive documentation to help customers reduce costs by switching their FinOps hubs from private to public networking access, including removal of all cost-generating resources.

Background

Private networking in FinOps hubs adds significant costs for virtual networks, private endpoints, dedicated compute resources, and managed integration runtimes. Many customers who initially deployed with private access may later want to reduce costs by switching to public access, which is still secure through RBAC and TLS encryption.

Changes Made

Added new section "Removing private networking" to docs-mslearn/toolkit/hubs/private-networking.md:

  • Explains the cost benefits of switching from private to public access
  • Provides step-by-step instructions for safely transitioning existing deployments with two specific deployment options:
    1. Redeploying from the existing deployment using the Azure portal's Deployments tab
    2. Installing the latest toolkit version using the same resource names
  • Includes appropriate warnings about security implications and planning considerations
  • Covers the complete process: planning, deployment updates, verification, and cleanup
  • Specifies proper deletion order for networking resources (private endpoints → DNS zones → VNet/NSGs)
  • Includes detailed steps for removing Azure Data Factory managed integration runtime to eliminate ongoing costs
  • Enhanced security recommendations including storage account settings, Data Explorer configuration, and IP restriction guidance
  • Follows the same structure and style as the existing "Enabling private networking" section

Updated changelog in docs-mslearn/toolkit/changelog.md:

  • Added entry under "Unreleased" section documenting the new feature with proper issue reference

The documentation provides clear guidance on how to make this transition safely, including important considerations about planning the change, coordinating with network administrators, verifying the deployment works correctly after the switch, and properly cleaning up all networking resources and managed runtimes in the correct order to avoid dependency conflicts and eliminate all associated costs.

Fixes #1342.


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Co-authored-by: MSBrett <24294904+MSBrett@users.noreply.github.com>
Copilot AI changed the title [WIP] [Hubs] Document how to move from private to public access [Hubs] Document how to move from private to public access Aug 1, 2025
Copilot AI requested a review from MSBrett August 1, 2025 14:18
Comment thread docs-mslearn/toolkit/changelog.md Outdated
Comment thread docs-mslearn/toolkit/hubs/private-networking.md
Comment thread docs-mslearn/toolkit/hubs/private-networking.md
…letion order, enhance security recommendations

Co-authored-by: MSBrett <24294904+MSBrett@users.noreply.github.com>
Copilot AI requested a review from MSBrett August 1, 2025 14:48

@MSBrett MSBrett left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to put our changes into the unreleased section. V12 has already shipped.

@microsoft-github-policy-service microsoft-github-policy-service Bot added Needs: Attention 👋 Issue or PR needs to be reviewed by the author or it will be closed due to no activity and removed Needs: Review 👀 PR that is ready to be reviewed labels Aug 1, 2025

Copilot AI commented Aug 1, 2025

Copy link
Copy Markdown
Contributor Author

We need to put our changes into the unreleased section. V12 has already shipped.

The changelog entry is already in the "Unreleased" section (line 30). It was moved there in commit 61c9619 to address the earlier review feedback.

@microsoft-github-policy-service microsoft-github-policy-service Bot added Needs: Triage 🔍 Untriaged issue needs to be reviewed and removed Needs: Attention 👋 Issue or PR needs to be reviewed by the author or it will be closed due to no activity labels Aug 1, 2025
Copilot AI requested a review from MSBrett August 1, 2025 15:03

@MSBrett MSBrett left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add a section which details removing the managed runtime from Azure Data Factory along with the managed private endpoints. Whilst leaving them won't break anything they do carry a cost, so it's best to remove them.

@microsoft-github-policy-service microsoft-github-policy-service Bot added the Needs: Attention 👋 Issue or PR needs to be reviewed by the author or it will be closed due to no activity label Aug 1, 2025
Co-authored-by: MSBrett <24294904+MSBrett@users.noreply.github.com>

Copilot AI commented Aug 1, 2025

Copy link
Copy Markdown
Contributor Author

Add a section which details removing the managed runtime from Azure Data Factory along with the managed private endpoints. Whilst leaving them won't break anything they do carry a cost, so it's best t...

Added a new section detailing how to remove the Azure Data Factory managed integration runtime along with managed private endpoints. The section includes step-by-step instructions for identifying, stopping, and deleting managed integration runtimes to eliminate ongoing costs. Commit e92bb86

@microsoft-github-policy-service microsoft-github-policy-service Bot removed the Needs: Attention 👋 Issue or PR needs to be reviewed by the author or it will be closed due to no activity label Aug 1, 2025
Copilot AI changed the title [Hubs] Document how to move from private to public access [Hubs] Document how to move from private to public access and remove costly resources Aug 1, 2025
Copilot AI requested a review from MSBrett August 1, 2025 16:38
Comment thread docs-mslearn/toolkit/hubs/private-networking.md
@microsoft-github-policy-service microsoft-github-policy-service Bot added the Needs: Attention 👋 Issue or PR needs to be reviewed by the author or it will be closed due to no activity label Aug 4, 2025
…access

Co-authored-by: MSBrett <24294904+MSBrett@users.noreply.github.com>
@microsoft-github-policy-service microsoft-github-policy-service Bot added Needs: Review 👀 PR that is ready to be reviewed and removed Needs: Attention 👋 Issue or PR needs to be reviewed by the author or it will be closed due to no activity labels Aug 4, 2025
Copilot AI requested a review from MSBrett August 4, 2025 22:46
@MSBrett MSBrett marked this pull request as ready for review August 4, 2025 22:50
@arthurclares arthurclares enabled auto-merge (squash) August 6, 2025 08:56
@arthurclares arthurclares merged commit 2367310 into dev Aug 7, 2025
4 checks passed
@arthurclares arthurclares deleted the copilot/fix-1342 branch August 7, 2025 15:38
@MSBrett MSBrett added this to the 2025-10 - October milestone Oct 12, 2025
flanakin pushed a commit that referenced this pull request Jan 31, 2026
…costly resources (#1787)

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: MSBrett <24294904+MSBrett@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Needs: Review 👀 PR that is ready to be reviewed Needs: Triage 🔍 Untriaged issue needs to be reviewed Skill: DevOps GitHub setup and automation Skill: Documentation Documentation updates Tool: FinOps guide Implementing FinOps guide

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Hubs] Document how to move from private to public access

5 participants