This session explains the basics of how connectivity works for SQL Database and how you can use network access controls to securely access SQL Database.
Note: At 7:33 during the video, it is said that "Allow Access to Azure services" restricts traffic to resources within the subscription - which is incorrect. Setting Allow access to Azure services button on the Portal (Firewall settings page) to ON shall allow traffic to/from resources ( e.g. Azure VM) or PaaS services( e.g. Web App) hosted inside Azure - within same subscription or from another subscription.
Read more at the following links:
- Connectivity Architecture: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-connectivity-architecture
- Impact of removing Allow Access to Azure Services: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-vnet-service-endpoint-rule-overview#impact-of-removing-allow-azure-services-to-access-server
- IP Based Firewall: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-firewall-configure
- Vnet Firewall Rules: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-vnet-service-endpoint-rule-overview