Secure storage account linked to Function App with private endpoint

Hi Linru_Hui,

Thanks for this excellent guide. I have the following confusion on step #5, "5. Set up firewall in storage account, blade “Networking” , allow access from existing two subnets of Vnet." - this will create two new service endpoints to this storage account, each associated with the subnets we are adding in the networking restrictions. i.e., we will have 2 service endpoints and n private endpoints (depending on the number of services used, table/ queue/ blob etc.). Is this the recommended way? I am wondering if there is a way to restrict the connectivity through private endpoints only.

Thank you!!