Private Endpoint / Private Link

Problem

Your application accesses a managed cloud database. The database normally has a public service endpoint. But you want connectivity to stay private rather than exposing the service through a public network endpoint.

Solution — Private Endpoint

The managed service receives a private endpoint reachable from your virtual network.

Application
    ↓ private IP
VNet
    ↓
Managed database

Core idea: Private Link-style technologies expose managed services privately inside your network.