woitzik.dev
Back to projects
•
1 min read
Azure OpenAI RAG Network (Base Edition)

Network foundation for a production AI RAG stack on Azure. Deploys Azure OpenAI and AI Search with VNet injection and Private DNS — no public endpoint exposure.

What’s included

  • Azure OpenAI + AI Search with VNet injection
  • Private DNS Zones for both services
  • System Managed Identities with RBAC chaining
  • Public Network Access disabled by default

Limitations (Base Edition)

Manual Shared Private Link approval required via the Azure Portal. The Enterprise Edition adds automated AzAPI-based link approval, eliminating all manual Portal steps.