Service endpoints vs private endpoints
Service endpoints secure subnet access; private endpoints provide a private IP in your VNet. Service endpoint: secure access from specific subnet(s). Service endpoint: service stays on normal endpoint. Private endpoint: private IP (NIC) inside your VNet. Private endpoint: commonly needs private DNS.

