Implementing a private endpoint

One of the foundations of securing resources is to reduce the attack surface area and minimize exposure to public network access.

Azure PaaS services’ inherent nature and concern are that they have public endpoints, which means any vulnerabilities are exposed and can be exploited. One of the best practices we should follow in our security model for cloud services is to limit public access to resources wherever possible and adopt a network model where private IP addressing is used wherever possible.

Azure Private Link is an Azure service that enables you to connect to public endpoint PaaS services such as Azure SQL database and Azure Storage from an Azure virtual network.

Using the Private Link capability, you can privately connect to a PaaS service by creating a private endpoint (in place of a public endpoint) to connect to.

The PaaS service endpoint is never exposed to the internet, and traffic to and from the service never traverses...