Restricting network traffic

• In AWS we can give access from one security group to another and we can acheive the same in azure with the help of Application security groups

Routing in Azure

• Refer Here for official docs
• Azure routing comes with comprehensive default rules
  
• We need to create a user defined route when we are using a virtual network appliance
• To create a user defined route Refer Here

Private subnet in Azure

• There are certain organizations where they want to isolate infrastructure from internet
• To enable this support azure also supports a NAT Gateway and Private subnet

Private Communications between networks

• Generally in a physical network to establish connectivity between private networks we use
  • bridges
  • vpns
• In AWS and Azure we have backbone (global) networks which connect every region to other region

AWS

• In AWS when we create two vpcs (irrespective of region), we can establish the private connectivity between them as long as there is no ip address conflicts
• VPC Peering can establish the private connectivy
  
• Overview
  
• For lab exercise watch classroom recording

Azure

• In Azure when we create two vnets (irrespective of region), we can establish the private connectivity between them as long as there is no ip address conflicts
• Azure also supports virtual network peering