Does creating a private endpoint for an azure service automatically completely lock it down from public access? or does this need to be explicitly done?
I am checking for Azure Storage right now, but would like to know how it works for all Azure PAAS services.
By default when you create a Private Endpoint in the Azure Portal it will automatically lock out public access. You can, however, turn public or broader access back on using the Networking tab and updating the firewall settings. (As you implement Private Endpoints, please make note of the DNS configuration/requirements. That's been my major stumbling area.)