Great article Sam, this is very dedtailed and helps to setup the demo.
Just one quick thing for folks facing issue with the ARM template (json) they may end up with following error:
Validation of network acls failure: SubnetsHaveNoServiceEndpointsConfigured:Subnets privateendpointsubnet of virtual network /subscriptions/XXXXXXX/resourceGroups/xxxx-aml-rg/providers/Microsoft.Network/virtualNetworks/myHub do not have ServiceEndpoints for Microsoft.Storage resources configured. Add Microsoft.Storage to subnet's ServiceEndpoints collection before trying to ACL Microsoft.Storage resources to these subnets.. Click here for details
Basically that privateendpointsubnet subnets needs to have Microsoft.Storage serviceendpoint enabled for the whole deployment to work smoothly. What you could do is post running the Powershell for Vnet/Subnet creation (if you dont want to modify the powershell script itself) is manually go to the Vnet/Subent and add the Microsoft.Storage Service endpoint for that privateendpointsubnet subnet. post that the deployment will be successful.
This can be done to the PS1 script also but in case if you dnt want to change script do it manually.
Thank you Sam once again for putting detailed article.