Regarding Microsoft public review,How to use NSG for Private Endpoint?

Question

Regarding this link, Microsoft's public preview of private endpoint support Network Security. I want to know how can I manage and add a policy on NSG and control the Private Endpoint.

Scenario:

I have a Virtual network with 3 subnets:
subnet-A
subnet-B
EndpointSubnet

I have a VM1 on Subnet-A and a VM2 on Subnet-B. Also, I have a blob storage and I created a private link for blob storage and assign EndpointSubnet to it.

currently, I have access to blob storage from VM1 and VM2 via private endpoint and when I ping blob storage, I received private IP from EndpointSubnet.

Now, I want to remove VM2's access to blob storage. Regarding this link I

1. I registered this feature
2. I enable PrivateEndpointNetworkPolicies

After that, it's not possible to add private endpoint NIC to NSG and I don't how I can add this rule and remove access from VM2 to blob storage.

Answer 1

@Mohsen Akhavan Firstly, apologies for the delay in responding here and any inconvenience this issue may have caused.

You should add NSG to the subnet in which Private Endpoint is there.

You cannot add NSG to the NIC of the PE.

So all PEs in the subnet where NSG is associated to will adhere to the NSG rules