Integrating Azure services with Azure VNet has many advantages. The following are some of them:
- Assigning different resources to the same subnet ensures that the communication between these services is done privately within the virtual network.
- You can communicate with Azure resources on-premise directly via its virtual network in case you have a site-to-site VPN or ExpressRoute configured in your environment.
More information about connectivity scenarios between on-premises and Azure will be covered in Chapter 4, Network Connectivity Scenarios in Azure.
- By default, multiple virtual networks are isolated from each other. However, they can be peered together, allowing communication between resources in the different virtual networks.
- You are not responsible for managing virtual network service endpoints.
- Traffic can be controlled to/from the virtual network using network security group (NSG).
More information about NSG will be covered later in this chapter.