Connect privately from an Azure Virtual Network to Azure SQL Database using Private Link, now in general availability.
From a security perspective, Private Link provides data exfiltration protection from the login path to SQL Database. Additionally, it requires no adding of IP addresses to the firewall on SQL Database and no changes to the connection string of the application.
Private Link is built on best-of-class software defined networking (SDN) functionality. Connect to the private endpoint from the same Virtual Network, a peered Virtual Network in the same region, or via network-to-network connection across regions. Also use ExpressRoute, private peering, or VPN tunneling to connect on-premises.
Learn more about this announcement by reading the documentation and blog post.