Private Endpoints

Private endpoints (Azure) and Private Service Connect (GCP) provide private IP addresses within a customer's virtual network for accessing managed cloud services, routing traffic entirely within the cloud provider's network. By binding a managed service (Azure Storage, Cloud SQL) to a private endpoint, customers prevent traffic from traversing the public internet and can apply network security groups to control access.

Private endpoints are a key control for data exfiltration prevention in regulated cloud environments.