We are currently creating snapshots from them creating VHD's to a storage account where we use the snapshots to create disks. I was wondering if there's a way to use private endpoint or private link to to keep the snapshots secure. I am working under the assumption the VHDs are sent to a storage account over the internet. We generate a SAS at the point of being copied. The requirement is to keep everything on the Azure network or to use private link\endpoint or service endpoint wherever possible.
Is this possible or does it need to go over the internet?
Thanks in advance and I hope ot makes sense.