Private Storage Accounts

[fellnerse]

I know that storage accounts in private networks are not supported at the moment. But this is something crucial for us. So I have some questions:

• are you working on this atm? if so, is there some rough estimate you could give me?
• is there any other way of protecting our data, and not exposing the storage account to the internet?
• as oai studio seems to work with search service in a private network, we are investigating setting up the index ourself, but for that it would be great if we could get more info what happens in the /indexprepocessing endpoint? with a socks5 proxy I'm able to upload data to the blob storage, but now get this error: I guess I would need something similar to the private link between cognitive search and oai? we set up private endopoints up with dns zones, but somehow it seems to not pick them up automatically I guess?

What would you recommend us going forward? Last resort, would be doing all the processing ourself, but I would like to use the oai endpoint

### Tasks

[gingergenius]

We have the same need. It looks like accessing blob storage with an SAS token in a private network works in general, it's just not compatible within the Open AI Studio service. Could you please confirm whether uploading own documents via the Studio UI uses the same logic as data_preparation.py?

[sarah-widder]

Hi @fellnerse @gingergenius we have added a lot of support for private endpoints, please see our documentation here: https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/use-your-data-securely

Note that an application is required to provision a private endpoint between Azure AI Search and Azure OpenAI.