Private endpoints for Azure Storage are now generally available in the Azure Government region. Private endpoints provide secure connectivity to Azure Storage from an Azure virtual network.
Private endpoints enable clients on an Azure virtual network to securely access data from a storage account through an IP address in the virtual network's address space over a private link. This enables network traffic between the virtual network and the storage service to traverse over the Microsoft backbone, eliminating exposure from the public internet.
Private endpoints enable you to block exfiltration of data from your virtual network. Using private endpoints also enables you to securely connect to a storage account from your on-premises network, when that network is connected to your virtual network using Azure Express Route or VPN.
Learn more.