...

• We can combine this with resource firewalls if we want to lock down storage accounts (allow/deny traffic) and make only accessible across Microsoft Backbone and so, we can remove public internet access.

...

Private Link

It’s similar to VNet Peering and we are not going over the public internet.