In the word of cybersecurity, the last thing you want is to have a target painted on you ~ Tim Cook
Azure storage accounts can be configured to allow access to only specific IP addresses, a range of IP addresses, or subnets in a VNet(VNet service endpoints).
Storage service supports public and private endpoints. Public endpoints are used for access over the public internet whereas private endpoints are used for connecting from Azure VNets using private IP addresses.
