Now available – Virtual network service endpoints for Azure Storage
Virtual network service endpoints allow you to secure Azure Storage accounts to your virtual networks, fully removing public internet access to these resources. Service endpoints provide optimal routing by always keeping traffic destined to Azure Storage on the Azure backbone network. This optimal route overrides any routes directing traffic through on-premises or virtual appliances.
Learn more about virtual network service endpoints.
Source: Azure Roadmap