AML VNet integration + model registry

[t-young31]

Description

As an InfoSec
I want to ensure that all serve infrastructure is vnet-integrated
So that the infrastructure is standard compliant and the data is secure

Acceptance criteria

• AML in serve is vnet integrated

[t-young31]

Questions:

• Does the drift/monitoring pipelines run on a compute cluster that can scale to 0?

Yes

• Does the AML workspace need an isolated ACR?
• Does this ACR need to be vnet isolated? (if it's only containing images that have dependencies to run a pipeline then I'd perhaps argue not)
• How does the AML docker container get built?

Can just be run on a base image from a ms registry

• Are models in an AML registry immutable?

tbd

[t-young31]

Extra DNS zones required in bootstrap

    privatelink.file.core.windows.net
    privatelink.api.azureml.ms
    privatelink.cert.api.azureml.ms
    privatelink.notebooks.azure.net

[t-young31]

Branch: https://github.com/UCLH-Foundry/FlowEHR/tree/t-young31/aml_vnet

[anastasiakuzn]

@damoodamoo , I am moving this back to the backlog.