Azure private endpoint support of network security groups is now generally available in most public regions.