Virtual Network Service Endpoints and Firewalls and Virtual Networks for Azure Storage are now generally available in all regions in the Azure public cloud and Microsoft Azure Government.
With Virtual Network Service Endpoints, you can allow traffic only from selected virtual networks and subnets, creating a secure network boundary for your data. You can also grant access for on-premises networks and other trusted internet traffic, by using network rules based on IP address ranges.
For more information about service endpoints, see Virtual Network Service Endpoints.
For more information about applying network security to Azure Storage, see Configure Azure Storage Firewalls and Virtual Networks.