Hopefully this is the right group to pose this question.  I have a Compute Gallery with some VM Applications in it.  I have the Storage Account with the blobs configured with a Private Endpoint.  When I try to turn off Public Network Access, the VM Apps in the Gallery no longer function, citing access issues.
I’m assuming the Compute Gallery won’t access my Storage Account over a Private Link inside my vNET, so my question is how do I lock down the Storage Account to not have things wide open?  Is there specific IPs that the Compute Gallery will use when accessing the Storage Account?

​Hopefully this is the right group to pose this question.  I have a Compute Gallery with some VM Applications in it.  I have the Storage Account with the blobs configured with a Private Endpoint.  When I try to turn off Public Network Access, the VM Apps in the Gallery no longer function, citing access issues.I’m assuming the Compute Gallery won’t access my Storage Account over a Private Link inside my vNET, so my question is how do I lock down the Storage Account to not have things wide open?  Is there specific IPs that the Compute Gallery will use when accessing the Storage Account?  Read More

​