Public and Private Endpoints in Azure

Private endpoint (Azure Private Link)

Private endpoint equals private IP in your VNet using Azure Private Link. VNet (Virtual Network) gets a private IP for the service. NIC (Network Interface) is placed in your subnet. Works for VNet plus peering plus VPN (Virtual Private Network) / ExpressRoute. Public access may still exist unless you disable it.