Challenge: one zonal egress identity for a whole VNet

تحدي: هوية خروج واحدة Zonal لـ VNet كاملة

Fabrikam’s workload in vnet-ch-nat runs in availability zone 1. Today vm-api01 (snet-api) leaves the network through a load balancer outbound rule and vm-job01 (snet-jobs) uses default outbound access, which Microsoft is retiring for new VNets. The VNet also has a GatewaySubnet for a future VPN. Give every workload subnet one predictable egress identity. No steps. Resource group: rg-ch-nat .

The 3 tasks you will do

• Requirement 1 — A zonal NAT gatewayالمتطلب 1 — ‏NAT gateway ‏Zonal
• Requirement 2 — Every workload subnet egresses through itالمتطلب 2 — كل Subnet فيها Workload تطلع عن طريقه
• Requirement 3 — No implicit egress any moreالمتطلب 3 — مفيش خروج ضمني تاني

The lesson it belongs to

• Outbound connectivity with NAT gateway