Azure AMPLs Setup Guide for Ingesting data to Application Insights through private network

Pre-Setup

• Create .NET Web App: Quickstart: Deploy an ASP.NET web app
• Create Log Analytics workspace: Create Log Analytics workspaces
• Create Application Insights component(workspace-based): Create a new Azure Monitor Application Insights workspace-based resource
• Enable application insights using auto instrumentation from the portal to monitor .NET Web App: Enable application monitoring in Azure App Service

Acronyms

• VNET: Virtual Network
• AMPLs: Azure Monitor Private Link Scope
• PE: Private Endpoint

Setup Scenarios

Hub and Spoke Networks (Recommended for Production Environment) - If requirement is to connect Web App Outbound traffic from VNET which is different than VNET configured for AMPLs configured PE.

• Create VNET for Web App Outbound traffic.
• Enable VNet Integration in the Web App's outbound traffic configuration.
• Create VNET for AMPLs and PE.
• Configure AMPLs and PE: Add the monitored Application Insights component in AMPLs.
• Add Virtual Network Link in AMPLs -> PE -> Private DNS Zone for the Web App Outbound traffic VNET.
• Create VNET Peering between the Web App Outbound traffic VNET and the VNET configured with AMPLs and PE.
• Test the Private Link Connection.

Same VNET Integration (Recommended for Test/Non-prod Environment) - If requirement is to connect Web App Outbound traffic from VNET which is same VNET configured for AMPLs configured PE.

• Create VNET with two subnets:
  • One for Web App Outbound traffic.
  • Second for AMPLs->PE.
• Enable VNet Integration in the Web App's outbound traffic configuration.
• Configure AMPLs and PE: Add the monitored Application Insights component in AMPLs.
• Test the Private Link Connection.

Additional References

• Application Insights Overview
• Create a Virtual Network
• Hub and Spoke Private Link Design
• Configure AMPLs and PE: Add the monitored Application Insights component in AMPLs

Limitation

An AMPLS object can connect to a maximum of 300 Log Analytics workspaces and 1,000 Application Insights components as per the service limits.