Deployment of an Azure Data Explorer into a virtual network is now generally available. Use this feature to isolate the network traffic and limit the attack surface for Azure Data Explorer and their corresponding communications.
Source: Azure Roadmap