This video goes over two ways of restricting access to Microsoft Azures PaaS services; Service Endpoints and Private Endpoints.  Both are used to restrict