The VNet service endpoints feature offers you the ability to integrate PaaS services without public IP directly into your VNet. A private address is assigned to the service endpoint and this IP is directly linked to your VNet. The connection via the internet is thus no longer possible for this PaaS service.

However, for the connection, the PaaS service and the VNet must be located in the same Azure region. Inter-regional endpoints are not possible. The feature is currently still in the preview status and only works with the services, Azure Storage and Azure SQL Database (or Azure SQL Data Warehouse), but further services are already in the pipeline.