Configuring and reviewing Azure VNet Service Endpoints for Azure Blob Storage

In this video, we look at how to configure Azure VNet Service Endpoints (preview) for Azure Blob Storage, and how to confirm it is in place by reviewing VM NIC effective routes, storage diagnostic logs, and traceroute. We also perform simple download tests via wget and upload tests via blobporter.

Table of Contents
00:53 Test download from storage using wget
02:55 traceroute to storage account
04:50 Check NIC effective routes prior to enabling service endpoint
06:10 Turn on service endpoint for storage on one subnet
07:30 Check effective routes after enabling service endpoint
10:00 Review storage account diagnostic logs
13:10 Upload test using Blobporter
15:45 Use dstat to see network and other counters
17:40 Download test using Blobporter
18:27 Removing service endpoint

[abarref]

Is it possible to connect an App Service (Web Site) to a Blob Storage via a VNet? Do Service Endpoints make this scenario possible? I want to make my blob storage only accessible by the web site, and not from internet