/aml-secure-workspace-cli

This repository has sample script files that can be used to convert a public aml workspace to private.

Primary LanguageShellMIT LicenseMIT

Update workspace in public to private via az cli.

About

Pre-requisites

  • Have a workspace deployed in public - with registry or no registry resource availability condition is taken care.
  • It is better all private dns zones need to be created first. Then, user can refer to same while creating private endpoints for them.

Components

  • The file workspace-in-vnet.sh has logic to update private endpoints for aml workspace resource.
  • The file storage-in-vnet.sh has logic to update private endpoints for storage resource.
  • The file vault-in-vnet.sh has logic to update private endpoint for keyvault resource.
  • The file reistry-in-vnet.sh has logic to update private endpoint for container registry resource.

How to run it?

  • Before running the script, make sure to run: 1) az upgrade, 2) az login --identity.
  • Fill all the required parameters such as workspace, resource_group, etc. details in secure-workspce.sh.
  • The script file secure-workspce.sh need to be run to have all the child shell scripts run.
$ ./secure-workspace.sh

Create public workspace

  • Before running the script create-public-workspace.sh, make sure to run: 1) az upgrade, 2) az login --identity.
  • Fill in required parameters in the script file.
$ ./create-public-workspace.sh