AzureFeeds

Power Platform + Azure Integration Validation Checklist

🔧 1. Virtual Network Configuration

• [ ] Ensure non-overlapping CIDR blocks across all VNets (e.g., avoid using 10.0.0.0/16 in both).


• [ ] Confirm VNet peering is established if cross-VNet communication is required.


• [ ] Validate DNS resolution across VNets (especially if using Private DNS Zones).

🔐 2. Private Endpoint Setup

• [ ] Confirm private endpoints are created for each Azure resource (SQL, Storage).


• [ ] If using multiple VNets, verify:




• [ ] Each VNet has its own private endpoint or


• [ ] A shared private endpoint is accessible via peering and DNS zone linking.




• [ ] Ensure Private DNS Zones are linked to all VNets that need to resolve the endpoint.

📡 3. Route Table Configuration

• [ ] Route tables include specific routes to private endpoint IPs.


• [ ] Avoid default routes (0.0.0.0/0) that send traffic to the internet unless explicitly required.


• [ ] Use service tags like AzureSQL, Storage, and PowerPlatform where applicable.


• [ ] Confirm no conflicting UDRs (User Defined Routes) that override private endpoint routing.

🛡️ 4. Network Security Groups (NSGs)

• [ ] NSGs allow traffic to/from Power Platform IP ranges or service tags.


• [ ] NSGs do not block traffic to private endpoint IPs.

🧭 5. Power Platform Environment Settings

• [ ] Environment is configured with VNet injection (if applicable).


• [ ] Subnet delegated to Microsoft.PowerPlatform.


• [ ] CIDR block is at least /25 for production workloads.

🧪 6. Connectivity Testing

• [ ] Test connection to SQL Server and Storage Account from Power Apps.


• [ ] Validate DNS resolution from Power Platform to private endpoint FQDNs.


• [ ] Use tools like nslookup, Test-NetConnection, or Azure Network Watcher for diagnostics.

📄 7. Documentation & Governance

• [ ] Document all private endpoints, DNS zones, and route tables.


• https://learn.microsoft.com/en-us/power-platform/admin/vnet-injection-overview.


• [ ] Ensure compliance with internal security and networking policies.