Generally Available: Private endpoint support in Azure Container Apps for workload profiles environments

Private endpoints are now supported in general availability for workload profile environments in Azure Container Apps. This enables customers to connect to their Container Apps environment using a private IP address in their Azure Virtual Network, eliminating exposure to the public internet and securing access to their applications. With private endpoints, customers can also connect directly from Azure Front Door to their workload profile environments over a private link instead of the public internet. Today, customers can enable Private Link to container apps origin for Azure Front Door through CLI and portal. TCP support is now available as well. 

This feature is supported for both Consumption and Dedicated plans in workload profile environments. Private endpoints are supported for both new and existing environments, so that customers can leverage the new capabilities without re-provisioning their environment. This capability also introduces the public network access setting, enabling customers to configure Azure networking policies.

GA pricing will go in effect on July 1st, 2025.

Learn more.