What you need to know
Account for a creation-time setting in address planning and replacement work.
Potentially affected
Use this review when an address-management or naming requirement is introduced for a private endpoint. Identify the actual endpoint, interface, approved subnet and consuming applications. Keep the creation-time limitation distinct from ordinary DNS-record or service-connection approval changes.
DSE recommendation
DSE recommends settling static-address and interface-name requirements before endpoint provisioning.
Source facts
Microsoft’s private-endpoint management guide says static addressing must be assigned when the endpoint is created. Configuring a static address on an existing endpoint is unsupported. The same guide identifies network-interface naming as another creation-time choice and says the existing private-endpoint interface cannot be renamed. Microsoft Learn.
Applicability
Use this review when an address-management or naming requirement is introduced for a private endpoint. Identify the actual endpoint, interface, approved subnet and consuming applications. Keep the creation-time limitation distinct from ordinary DNS-record or service-connection approval changes.
DSE recommendation
DSE recommends settling static-address and interface-name requirements before endpoint provisioning. If a deployed endpoint does not meet the requirement, have its owner design the necessary replacement or alternative rather than promising an in-place edit. Include application dependencies, DNS, approvals and a tested recovery approach in the change plan. Do not remove the working endpoint merely to investigate available settings.
Verification
For an approved new endpoint, inspect the assigned address and interface name against the plan. Verify service-connection status, expected name resolution and an authorized application operation. During any planned replacement, retain evidence that consumers reach the intended new endpoint before retiring the old path. Record unfinished dependency changes explicitly.
Official references
Review the official source
Manage Azure private endpoints - Azure Private Link | Microsoft Learn · Verified September 17, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE