In Azure, most PaaS services are accessible using their public IPv4 addresses. This works perfectly well for all systems that are intended to be public, but of course, that is not always the case. Fortunately, Azure VNets give you the option to configure a service endpoint, a special kind of endpoint that switches an IP address that is used by a service from a public to a private one.
In this section, you will learn how to configure those endpoints in your VNets so that you can encapsulate your services and protect them from unauthorized access.
