Azure Networking Basics

 Here is an Overview of Azure Networking:

Only some services offer private endpoints - I think private endpoints are basically NICs.  The DNS directs traffic to the private endpoint, which connects to the service (e.g., Key Vault).