You turn off public access on a storage account, add a private endpoint, deploy... and your app gets a 403 "This request is not authorized to perform this operation" . The networking is almost never the problem.

Source: [Dev.to](https://dev.to/bicep_and_beyond_dev/azure-storage-private-endpoints-with-bicep-the-dns-bits-everyone-gets-wrong-40eb)

Sponsored