Multiple instances of SAME service to be accessed from vnet/subnet using Private vs Service Endpoint

Question

When we have a requirement to connect to 2 different storage accounts (SAME service ie Azure Storage / 2 instances) from a .NET/Su.net,
Using-
1.Private Endpoints implies that we need one Private Endpoint for each storage account.
(And single private endpoint can be used across su.nets in the .net)
2.Service Endpoints implies that a SINGLE Service Endpoint is created for STORAGE SERVICE as a whole and it gets re used for different storage accounts.
(And each su.net needing access to storage accounts would need its own service endpoint)
Would this inference be correct?

Regards,
Aditya Garg

Answer 1

What you mentioned is the correct, however, there are more differences and use-case for both these services. One of the major difference I would say is

Private Endpoints grant.network access to specific resources behind a given service providing granular segmentation. Traffic can reach the service resource from on-premises without using public endpoints.

A Service Endpoint remains a publicly routable IP address. A Private Endpoint is a private IP in the address space of the virtual.network where the private endpoint is configured.

One should also need to know their limitations

• Service endpoint limitation
• Private endpoint limitation

---

Some other reference