Azure Container App Jobs accessing storage queue over private network link

Question

Hi,

Are Azure Container App Jobs, which are configured for Event Scaling from an Azure Queue Storage account, supposed to be able to get scaled if the Storage account has a private network link to a subnet within the same VNET which also hosts the Container App Environment Subnet?

I find Authorization failed errors in the storage account pointing to an IP address in the container app job subnet for the periodic polling which KEDA does to check for new messages in the storage queue.

It seems to work if we explicitly give access to the container app subnet in the storage account Networking config.

Shouldn't just using a privatelink for the storage account also work?

Thanks.